Signing Party

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-11627 Apr 30, 23:29 CRITICAL POC Act Now

gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Debian Debian Linux Leap Opensuse +1

NVD

CVSS 3.1

9.8

EPSS

2.8%

CVE-2019-11627

EPSS 3% CVSS 9.8

CRITICAL POC Act Now

gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Debian Debian Linux +3

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy