Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Priority LOW 37

Tonic is a native gRPC client & server implementation with async/await support.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00622 Published 2024-10-01 Fixed in 0.12.3 CWE-755
TI-2024-01106 CVE-2024-1191 · GHSA-xpmj-434v-j6xg

Hyper CdCatalog HCF File denial of service

Priority LOW 25

A vulnerability was found in Hyper CdCatalog 2.3.1.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00419 Published 2024-02-02 No fix listed CWE-404
TI-2023-11846 CVE-2023-26964 · GHSA-f8vr-r385-rh5r

An issue was discovered in hyper v0.13.7.

Priority HIGH 72

An issue was discovered in hyper v0.13.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01121 Published 2023-04-11 Fixed in 0.3.17 CWE-770
Priority HIGH 72

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01076 Published 2023-02-21 No fix listed CWE-770
Priority LOW 34

util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec"…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00423 Published 2018-04-09 No fix listed CWE-838