Skip to content

Vendor

tucows vulnerabilities

3 published CVES affecting tucows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of tucows alerts

Products

Latest tucows CVEs

Newest publication first

  1. CVE-2020-37013 Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)

    Published
    HighCVSS 8.4 EPSS 0.20%

    Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrary code. Attackers can craft malicious payloads and overwrite Structured Exception Handler (SEH) to execute shellcode when...

  2. CVE-2020-36940 Easy CD & DVD Cover Creator 4.13 - Denial of Service

    Published
    MediumCVSS 5.1 EPSS 0.29%

    Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash.

  3. CVE-2006-6551 PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php in Tucows Client Code Suite (CCS) 1.2.1015 and earlier allows remote attackers to execu...

    Published
    HighCVSS 7.5 EPSS 2.2% Public exploit

    PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php in Tucows Client Code Suite (CCS) 1.2.1015 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _ENV[TCA_HOME] parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.