Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Pocoproject Clear all filters
TI-2023-28771 CVE-2023-52389 · GHSA-3g75-6vfp-4hm3

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack…

Priority MEDIUM 50

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00851 Published 2024-01-27 No fix listed CWE-190
TI-2017-14681 CVE-2017-1000472 · GHSA-46gc-5p3g-hwvg

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries…

Priority LOW 32

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal a…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01681 Published 2018-01-03 No fix listed CWE-22
TI-2014-00333 CVE-2014-0350 · GHSA-whgv-p774-rw69

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries…

Priority LOW 31

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during compa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01218 Published 2014-04-26 No fix listed CWE-310