Skip to content
Noroxi

homebrew records

4 published records for vendor homebrew.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2024-36858
    40Plan

    An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    homebrew · janJun 4, 2024

  • CVE-2024-37273
    39Monitor

    An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via

    CriticalCVSS 9.8No exploitEPSS 0%

    homebrew · janJun 4, 2024

  • CVE-2024-42381
    33Monitor

    os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve

    HighCVSS 8.3No exploitEPSS 0%

    Jul 31, 2024

  • CVE-2024-36857
    31Monitor

    Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

    HighCVSS 7.5Proof of conceptEPSS 2%

    homebrew · janJun 4, 2024