pocoproject records
5 published records for vendor pocoproject.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-190 Integer Overflow or Wraparound1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-310 Cryptographic Issues1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-404 Improper Resource Shutdown or Release1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-52389No exploit | UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::converpocoproject · poco · CWE-190 | Critical9.8 | — | 0.8% | Jan 26, 2024 |
28Monitor | CVE-2025-45766No exploit | poco v1.14.1-release was discovered to contain weak encryption.pocoproject · poco · CWE-327 | High7.0 | — | 0.1% | Aug 6, 2025 |
27Monitor | CVE-2017-1000472No exploit | The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename valupocoproject · poco · CWE-22 | Medium6.5 | — | 1.6% | Jan 3, 2018 |
25Monitor | CVE-2014-0350No exploit | The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers pocoproject · poco c\+\+ libraries · CWE-310 | Medium6.4 | — | 1.2% | Apr 25, 2014 |
7Monitor | CVE-2025-6375No exploit | poco MultipartReader.cpp MultipartInputStream null pointer dereferencepocoproject · poco · CWE-404 | Low1.9 | — | 0.2% | Jun 20, 2025 |
- CVE-2023-5238939Monitor
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::conver
CriticalCVSS 9.8No exploitEPSS 0%pocoproject · pocoJan 26, 2024
- CVE-2025-4576628Monitor
poco v1.14.1-release was discovered to contain weak encryption.
HighCVSS 7.0No exploitEPSS 0%pocoproject · pocoAug 6, 2025
- CVE-2017-100047227Monitor
The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename valu
MediumCVSS 6.5No exploitEPSS 1%pocoproject · pocoJan 3, 2018
- CVE-2014-035025Monitor
The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers
MediumCVSS 6.4No exploitEPSS 1%pocoproject · poco c\+\+ librariesApr 25, 2014
- CVE-2025-63757Monitor
poco MultipartReader.cpp MultipartInputStream null pointer dereference
LowCVSS 1.9No exploitEPSS 0%pocoproject · pocoJun 20, 2025