radicale records
4 published records for vendor radicale.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-21 DEPRECATED: Pathname Traversal and Equivalence Errors1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2015-8747No exploit | The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted componeradicale · radicale · CWE-20 | Critical10.0 | — | 2.9% | Feb 3, 2016 |
41Plan | CVE-2016-1505No exploit | The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted pradicale · radicale · CWE-21 | Critical10.0 | — | 2.6% | Feb 3, 2016 |
33Monitor | CVE-2017-8342No exploit | Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authenticatiradicale · radicale · CWE-362 | High8.1 | — | 2.0% | Apr 30, 2017 |
22Monitor | CVE-2015-8748No exploit | Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user radicale · radicale · CWE-264 | Medium5.3 | — | 2.2% | Feb 3, 2016 |
- CVE-2015-874741Plan
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted compone
CriticalCVSS 10.0No exploitEPSS 2%radicale · radicaleFeb 3, 2016
- CVE-2016-150541Plan
The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted p
CriticalCVSS 10.0No exploitEPSS 2%radicale · radicaleFeb 3, 2016
- CVE-2017-834233Monitor
Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authenticati
HighCVSS 8.1No exploitEPSS 2%radicale · radicaleApr 30, 2017
- CVE-2015-874822Monitor
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user
MediumCVSS 5.3No exploitEPSS 2%radicale · radicaleFeb 3, 2016