Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority MEDIUM 48

SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03169 Published 2021-06-18 No fix listed CWE-22
Priority LOW 36

SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01046 Published 2021-04-06 No fix listed CWE-120
Priority LOW 35

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00475 Published 2019-12-31 No fix listed CWE-119