Skip to main content

Icewhale

9 CVEs vendor

Monthly

CVE-2025-34171 Jan 02, 17:15 MEDIUM This Month

Casaos contains a vulnerability that allows attackers to retrieve sensitive configuration files and system debug information (CVSS 5.3).

Information Disclosure Casaos Icewhale
NVD GitHub
CVSS 4.0
6.9
EPSS
0.1%
CVE-2024-28232 Apr 01, 17:15 Go HIGH POC PATCH This Week

Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Userservice Icewhale
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-24766 Mar 06, 19:15 Go HIGH POC PATCH This Week

CasaOS-UserService provides user management functionalities to CasaOS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Userservice Icewhale
NVD GitHub
CVSS 3.1
7.5
EPSS
0.8%
CVE-2024-24767 Mar 06, 18:15 Go CRITICAL POC PATCH Act Now

CasaOS-UserService provides user management functionalities to CasaOS. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Icewhale
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2024-24765 Mar 06, 18:15 Go CRITICAL POC PATCH Act Now

CasaOS-UserService provides user management functionalities to CasaOS. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Icewhale
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-37469 Aug 24, 23:15 Go HIGH POC PATCH This Week

CasaOS is an open-source personal cloud system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Casaos Icewhale
NVD GitHub
CVSS 3.1
8.8
EPSS
1.3%
CVE-2023-37266 Jul 17, 21:15 Go CRITICAL POC PATCH Act Now

CasaOS is an open-source Personal Cloud system. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Casaos Icewhale
NVD GitHub
CVSS 3.1
9.8
EPSS
5.9%
CVE-2023-37265 Jul 17, 21:15 Go CRITICAL POC PATCH Act Now

CasaOS is an open-source Personal Cloud system. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Casaos Casaos Gateway Icewhale
NVD GitHub
CVSS 3.1
9.8
EPSS
6.4%
CVE-2022-24193 Mar 10, 17:45 Go CRITICAL POC PATCH Act Now

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Casaos Icewhale
NVD GitHub
CVSS 3.1
9.8
EPSS
6.0%
EPSS 0% CVSS 6.9
MEDIUM This Month

Casaos contains a vulnerability that allows attackers to retrieve sensitive configuration files and system debug information (CVSS 5.3).

Information Disclosure Casaos Icewhale
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Userservice Icewhale
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

CasaOS-UserService provides user management functionalities to CasaOS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Userservice Icewhale
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC PATCH Act Now

CasaOS-UserService provides user management functionalities to CasaOS. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Icewhale
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC PATCH Act Now

CasaOS-UserService provides user management functionalities to CasaOS. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Casaos Icewhale
NVD GitHub
EPSS 1% CVSS 8.8
HIGH POC PATCH This Week

CasaOS is an open-source personal cloud system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Casaos Icewhale
NVD GitHub
EPSS 6% CVSS 9.8
CRITICAL POC PATCH Act Now

CasaOS is an open-source Personal Cloud system. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Casaos Icewhale
NVD GitHub
EPSS 6% CVSS 9.8
CRITICAL POC PATCH Act Now

CasaOS is an open-source Personal Cloud system. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Casaos Casaos Gateway +1
NVD GitHub
EPSS 6% CVSS 9.8
CRITICAL POC PATCH Act Now

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Casaos Icewhale
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy