Scratch Vm

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-14000 npm CRITICAL PATCH Act Now

MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in remote code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Deserialization Scratch Vm

NVD GitHub

CVSS 3.1

9.8

EPSS

2.8%

CVE-2020-14000 npm

EPSS 3% CVSS 9.8

CRITICAL PATCH Act Now

MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in remote code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Deserialization Scratch Vm

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy