Soko

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-28424 CRITICAL PATCH Act Now

Soko if the code that powers packages.gentoo.org. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

RCE PostgreSQL SQLi Soko

NVD GitHub

CVSS 3.1

9.8

EPSS

1.1%

CVE-2023-26033 CRITICAL PATCH Act Now

Gentoo soko is the code that powers packages.gentoo.org. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

Denial Of Service SQLi Soko

NVD GitHub

CVSS 3.1

9.1

EPSS

0.6%

CVE-2023-28424

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

RCE PostgreSQL SQLi +1

NVD GitHub

CVE-2023-26033

EPSS 1% CVSS 9.1

CRITICAL PATCH Act Now

Denial Of Service SQLi Soko

NVD GitHub