ecmwf records
2 published records for vendor ecmwf.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2017-17515No exploit | etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which ecmwf · metview · CWE-74 | High8.8 | — | 1.6% | Dec 14, 2017 |
27Monitor | CVE-2010-3393No exploit | magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges viaecmwf · magics\+\+ | Medium6.9 | — | 0.3% | Oct 20, 2010 |
- CVE-2017-1751535Monitor
etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which
HighCVSS 8.8No exploitEPSS 1%ecmwf · metviewDec 14, 2017
- CVE-2010-339327Monitor
magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via
MediumCVSS 6.9No exploitEPSS 0%ecmwf · magics\+\+Oct 20, 2010