Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-23603

Code injection in iTunesRPC-Remastered

iTunesRPC-Remastered is a discord rich presence application for use with iTunes & Apple Music. In code before commit 24f43aa user input is not properly sanitized and code injection is possible. Users are advised to upgrade as soon as is possible. There are no known workarounds for this issue.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Itunesrpc-remastered Project
Products
Itunesrpc-remastered
CVE-2022-23611

OS command injection in iTunesRPC-Remastered

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade.

CVSS 3.1 · 8.1 High EPSS 1.4% KEV · Not listed
Vendors
Itunesrpc-remastered Project
Products
Itunesrpc-remastered
CVE-2022-23609

Path traveresal in iTunesRPC-Remastered

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible.

CVSS 3.1 · 8.3 High EPSS 1.0% KEV · Not listed
Vendors
Itunesrpc-remastered Project
Products
Itunesrpc-remastered