shadowsocks records
5 published records for vendor shadowsocks.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 60%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-306 Missing Authentication for Critical Function3
- CWE-494 Download of Code Without Integrity Check1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-27574No exploit | ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.shadowsocks · shadowsocksx-ng · CWE-494 | Critical9.8 | — | 0.4% | Mar 3, 2023 |
31Monitor | CVE-2019-5163No exploit | An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2.shadowsocks · shadowsocks-libev · CWE-306 | High7.5 | — | 2.3% | Dec 3, 2019 |
31Monitor | CVE-2017-15924No exploit | In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configurshadowsocks · shadowsocks-libev · CWE-78 | High7.8 | — | 1.3% | Oct 27, 2017 |
31Monitor | CVE-2019-5164No exploit | An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2.shadowsocks · shadowsocks-libev · CWE-306 | High7.8 | — | 0.7% | Dec 3, 2019 |
29Monitor | CVE-2019-5152No exploit | An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.shadowsocks · shadowsocks-libev · CWE-306 | High7.4 | — | 1.4% | Dec 18, 2019 |
- CVE-2023-2757439Monitor
ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.
CriticalCVSS 9.8No exploitEPSS 0%shadowsocks · shadowsocksx-ngMar 3, 2023
- CVE-2019-516331Monitor
An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2.
HighCVSS 7.5No exploitEPSS 2%shadowsocks · shadowsocks-libevDec 3, 2019
- CVE-2017-1592431Monitor
In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configur
HighCVSS 7.8No exploitEPSS 1%shadowsocks · shadowsocks-libevOct 27, 2017
- CVE-2019-516431Monitor
An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2.
HighCVSS 7.8No exploitEPSS 1%shadowsocks · shadowsocks-libevDec 3, 2019
- CVE-2019-515229Monitor
An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.
HighCVSS 7.4No exploitEPSS 1%shadowsocks · shadowsocks-libevDec 18, 2019