Search vulnerabilities

Results 2

Export CSV
CVE-2017-1000024

shotwell: Information disclosure in the web publishing plugins

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2016-1000033

shotwell: TLS certificates are not validated when publishing photos to external services

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors