Totd

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-34294 CRITICAL POC Act Now

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Totd

NVD GitHub

CVSS 3.1

9.8

EPSS

1.4%

CVE-2022-34295 MEDIUM POC PATCH This Month

totd before 1.5.3 does not properly randomize mesg IDs. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Totd

NVD GitHub

CVSS 3.1

6.5

EPSS

1.5%

CVE-2022-34294

EPSS 1% CVSS 9.8

CRITICAL POC Act Now

Code Injection Totd

NVD GitHub

CVE-2022-34295

EPSS 2% CVSS 6.5

MEDIUM POC PATCH This Month

Information Disclosure Totd

NVD GitHub