Soko

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-28424 Mar 20, 13:15 CRITICAL PATCH Act Now

Soko if the code that powers packages.gentoo.org. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

RCE SQLi PostgreSQL Soko Gentoo

NVD GitHub

CVSS 3.1

9.8

EPSS

1.1%

CVE-2023-26033 Feb 25, 00:15 CRITICAL PATCH Act Now

Gentoo soko is the code that powers packages.gentoo.org. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

Denial Of Service SQLi Soko Gentoo

NVD GitHub

CVSS 3.1

9.1

EPSS

0.6%

CVE-2023-28424

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

RCE SQLi PostgreSQL +2

NVD GitHub

CVE-2023-26033

EPSS 1% CVSS 9.1

CRITICAL PATCH Act Now

Denial Of Service SQLi Soko +1

NVD GitHub