Advisories · Technology
networkupstools nut.
Every CVE that names networkupstools nut among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.4 Low
NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg
- networkupstools nut
- Memory corruption
- CVSS 8.1 High
upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution
- networkupstools nut
- Command injection
- CVSS 8.2 High
Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN
- networkupstools nut
- CWE-829