Pocoproject
Monthly
poco v1.14.1-release was discovered to contain weak encryption. Rated high severity (CVSS 7.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Null pointer dereference in POCO C++ Libraries up to 1.14.1 allows local attackers to cause a denial of service via crafted multipart input. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.05%), indicating limited exploitation likelihood.
The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
poco v1.14.1-release was discovered to contain weak encryption. Rated high severity (CVSS 7.0), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Null pointer dereference in POCO C++ Libraries up to 1.14.1 allows local attackers to cause a denial of service via crafted multipart input. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.05%), indicating limited exploitation likelihood.
The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.