Skip to content
OpenAdvisories

Package · Ubuntu

poco

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 7.0
    CVE-2025-45766

    poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that ke…

    poco poco Debian Ubuntu
  • Low 3.3
    CVE-2025-6375

    poco MultipartReader.cpp MultipartInputStream null pointer dereference

    A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be a…

    poco poco Debian Ubuntu
  • Critical 9.8
    CVE-2023-52389

    UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::…

    poco poco Debian Ubuntu
  • High 8.1
    CVE-2021-46143 Public exploit

    In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

    firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-1000472

    The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restr…

    poco poco Debian Ubuntu
  • Unscored —
    CVE-2014-0350

    The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-…

    poco poco Debian Ubuntu