Vendor

simpestreams project vulnerabilities

1 published CVE affecting simpestreams project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Atom feed of simpestreams project alerts

Products

simplestreams 1

Latest simpestreams project CVEs

Newest publication first

CVE-2015-1337 Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka...
Published 2015-10-09

MediumCVSS 6.8 EPSS 1.7%

Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

simpestreams project vulnerabilities

Products

Latest simpestreams project CVEs

CVE-2015-1337 Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka...