Search vulnerabilities

Results 3

Export CSV
CVE-2020-36200

TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-36199

TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.

CVSS 3.1 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Products
CVE-2020-35929

In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Products