Celluloid

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-7659 Jun 01, 13:15 Ruby HIGH This Week

reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Request Smuggling Celluloid Reel

NVD

CVSS 3.1

7.5

EPSS

1.3%

CVE-2014-6016 Sep 22, 10:55 MEDIUM This Month

The Celluloid (aka com.eurisko.celluloid) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Celluloid

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2020-7659 Ruby

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure Request Smuggling Celluloid +1

NVD

CVE-2014-6016

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Celluloid

NVD