bmaltais records
6 published records for vendor bmaltais.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-32022Proof of concept | Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)bmaltais · kohya ss · CWE-77 | Critical9.8 | — | 3.1% | Apr 16, 2024 |
40Plan | CVE-2024-32026No exploit | Kohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`)bmaltais · kohya ss · CWE-77 | Critical9.8 | — | 3.0% | Apr 16, 2024 |
40Plan | CVE-2024-32027No exploit | Kohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`)bmaltais · kohya ss · CWE-77 | Critical9.8 | — | 3.0% | Apr 16, 2024 |
37Monitor | CVE-2024-32025No exploit | Kohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`)bmaltais · kohya ss · CWE-77 | Critical9.1 | — | 2.4% | Apr 16, 2024 |
26Monitor | CVE-2024-32024No exploit | Kohya_ss vulenrable to path injection in `common_gui.py` `add_pre_postfix` function (`GHSL-2024-023`)bmaltais · kohya ss · CWE-22 | Medium6.5 | — | 0.6% | Apr 16, 2024 |
21Monitor | CVE-2024-32023No exploit | Kohya_ss vulnerable to path injection in `common_gui.py` `find_and_replace` function (`GHSL-2024-024`)bmaltais · kohya ss · CWE-22 | Medium5.3 | — | 0.6% | Apr 16, 2024 |
- CVE-2024-3202240Plan
Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)
CriticalCVSS 9.8Proof of conceptEPSS 3%bmaltais · kohya ssApr 16, 2024
- CVE-2024-3202640Plan
Kohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`)
CriticalCVSS 9.8No exploitEPSS 3%bmaltais · kohya ssApr 16, 2024
- CVE-2024-3202740Plan
Kohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`)
CriticalCVSS 9.8No exploitEPSS 3%bmaltais · kohya ssApr 16, 2024
- CVE-2024-3202537Monitor
Kohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`)
CriticalCVSS 9.1No exploitEPSS 2%bmaltais · kohya ssApr 16, 2024
- CVE-2024-3202426Monitor
Kohya_ss vulenrable to path injection in `common_gui.py` `add_pre_postfix` function (`GHSL-2024-023`)
MediumCVSS 6.5No exploitEPSS 0%bmaltais · kohya ssApr 16, 2024
- CVE-2024-3202321Monitor
Kohya_ss vulnerable to path injection in `common_gui.py` `find_and_replace` function (`GHSL-2024-024`)
MediumCVSS 5.3No exploitEPSS 0%bmaltais · kohya ssApr 16, 2024