Byron records
7 published records for vendor byron.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 85.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences1
- CWE-23 Relative Path Traversal1
- CWE-345 Insufficient Verification of Data Authenticity1
- CWE-41 Improper Resolution of Path Equivalence1
- CWE-67 Improper Handling of Windows Device Names1
- CWE-706 Use of Incorrectly-Resolved Name or Reference1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-35186No exploit | gix traversal outside working tree enables arbitrary code executionbyron · gitoxide · CWE-23 | High8.8 | — | 0.8% | May 23, 2024 |
27Monitor | CVE-2024-40644No exploit | gitoxide's gix-path can use a fake program files locationbyron · gitoxide · CWE-345 | Medium6.8 | — | 0.2% | Jul 18, 2024 |
25Monitor | CVE-2024-32884No exploit | gix-transport indirect code execution via malicious usernamebyron · gitoxide · CWE-77 | Medium6.4 | — | 0.5% | Apr 26, 2024 |
24Monitor | CVE-2024-45405No exploit | gix-path improperly resolves configuration path reported by Gitbyron · gitoxide · CWE-41 | Medium6.0 | — | 0.2% | Sep 6, 2024 |
21Monitor | CVE-2024-35197No exploit | gix refs and paths with reserved Windows device names access the devicesbyron · gitoxide · CWE-67 | Medium5.4 | — | 0.4% | May 23, 2024 |
10Monitor | CVE-2024-45305No exploit | gix-path uses local config across repos when it is the highest scopebyron · gitoxide · CWE-706 | Low2.5 | — | 0.2% | Sep 2, 2024 |
10Monitor | CVE-2024-43785No exploit | gitoxide-core does not neutralize special characters for terminalsbyron · gitoxide · CWE-150 | Low2.5 | — | 0.1% | Aug 22, 2024 |
- CVE-2024-3518635Monitor
gix traversal outside working tree enables arbitrary code execution
HighCVSS 8.8No exploitEPSS 0%byron · gitoxideMay 23, 2024
- CVE-2024-4064427Monitor
gitoxide's gix-path can use a fake program files location
MediumCVSS 6.8No exploitEPSS 0%byron · gitoxideJul 18, 2024
- CVE-2024-3288425Monitor
gix-transport indirect code execution via malicious username
MediumCVSS 6.4No exploitEPSS 0%byron · gitoxideApr 26, 2024
- CVE-2024-4540524Monitor
gix-path improperly resolves configuration path reported by Git
MediumCVSS 6.0No exploitEPSS 0%byron · gitoxideSep 6, 2024
- CVE-2024-3519721Monitor
gix refs and paths with reserved Windows device names access the devices
MediumCVSS 5.4No exploitEPSS 0%byron · gitoxideMay 23, 2024
- CVE-2024-4530510Monitor
gix-path uses local config across repos when it is the highest scope
LowCVSS 2.5No exploitEPSS 0%byron · gitoxideSep 2, 2024
- CVE-2024-4378510Monitor
gitoxide-core does not neutralize special characters for terminals
LowCVSS 2.5No exploitEPSS 0%byron · gitoxideAug 22, 2024