CWE-64

Total CVEs
2
Vulnerabilities
Avg CVSS v3
6.6
Medium
Avg CVSS v2
3.6
Low
Latest CVE
2021
Most Recent

Severity Distribution

Critical 0
0%
High 1
50%
Medium 1
50%
Low 0
0%

External References

All CVEs (2)

Page 1 of 1
CVSS:7.1(High)

The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrar...

CWE-642021
CVSS:6.1(Medium)

A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows.

CWE-642021