Search vulnerabilities

Results 2

Export CSV
CVE-2020-25490

Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine.

CVSS 3.1 · 7.3 High EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2020-25489

A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors