Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Ecmwf Clear all filters
TI-2017-12792 CVE-2017-17515 · GHSA-r9gq-38jp-7grq

etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program…

Priority MEDIUM 41

etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01635 Published 2017-12-14 No fix listed CWE-74
TI-2010-03231 CVE-2010-3393 · GHSA-xmjg-qf38-q3fm

magics-config in Magics++ 2.10.0 places a zero-length directory name in the…

Priority LOW 31

magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00386 Published 2010-10-20 No fix listed