shrubbery records
2 published records for vendor shrubbery.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-48643No exploit | Shrubbery tac_plus 2.x, 3.x.CWE-94 | Critical9.8 | — | 1.1% | May 16, 2024 |
27Monitor | CVE-2008-4979No exploit | getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /tshrubbery · rancid · CWE-59 | Medium6.9 | — | 0.3% | Nov 6, 2008 |
- CVE-2023-4864339Monitor
Shrubbery tac_plus 2.x, 3.x.
CriticalCVSS 9.8No exploitEPSS 1%May 16, 2024
- CVE-2008-497927Monitor
getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /t
MediumCVSS 6.9No exploitEPSS 0%shrubbery · rancidNov 6, 2008