TA
Product
Tardiff
by Tardiff Project · last CVE May 6, 2016
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 1
Watch

Add Tardiff to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-0857
9.8
5%
May 6
Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file
Affected: All versions, or not specified
CVE-2015-0858
3.3
0%
May 6
Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory
Affected: All versions, or not specified
Showing 2