feh project kayıtları
feh project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-20 Improper Input Validation1
- CWE-787 Out-of-bounds Write1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2017-7875İstismar yok | In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundfeh project · feh · CWE-787 | Kritik9,8 | — | %2,2 | 14 Nis 2017 |
22İzleyin | CVE-2010-2246Kavram kanıtı | feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacfeh project · feh · CWE-20 | Orta5,1 | — | %6,6 | 26 May 2011 |
13İzleyin | CVE-2011-0702İstismar yok | The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack ofeh project · feh · CWE-59 | Düşük3,3 | — | %0,3 | 14 Şub 2011 |
13İzleyin | CVE-2011-1031İstismar yok | The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attackfeh project · feh · CWE-59 | Düşük3,3 | — | %0,3 | 14 Şub 2011 |
- CVE-2017-787540Planlayın
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-bound
KritikCVSS 9,8İstismar yokEPSS %2feh project · feh14 Nis 2017
- CVE-2010-224622İzleyin
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharac
OrtaCVSS 5,1Kavram kanıtıEPSS %6feh project · feh26 May 2011
- CVE-2011-070213İzleyin
The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack o
DüşükCVSS 3,3İstismar yokEPSS %0feh project · feh14 Şub 2011
- CVE-2011-103113İzleyin
The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack
DüşükCVSS 3,3İstismar yokEPSS %0feh project · feh14 Şub 2011