Vulnerabilities

TI-2016-09193 CVE-2016-20015 · GHSA-8hvh-7pr8-r6wh

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript…

HIGH 68

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00663 Published 2022-09-20 No fix listed CWE-362

TI-2017-14213 CVE-2017-20147 · GHSA-5mp3-vqfj-w7mq

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript…

MEDIUM 62

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01028 Published 2022-09-20 No fix listed CWE-377

TI-2013-03631 CVE-2013-4158 · GHSA-gj7j-7773-fpw5

smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790)

LOW 30

smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790)

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01246 Published 2019-12-11 Fixed in 2.6.9 CWE-79

TI-2013-03641 CVE-2013-4168 · GHSA-f2g6-6jfq-w6cj

Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.

LOW 29

Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01069 Published 2019-11-01 No fix listed CWE-79

Vulnerabilities

Filters

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript…

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript…

smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790)

Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.