Lucene search
K

7 matches found

NVD
NVD
added 2026/02/17 3:16 p.m.3 views

CVE-2026-22208

OpenS100 the reference implementation S-100 viewer prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaLopenlibs without sandboxing or capability restrictions, exposing standard libraries such as...

9.6CVSS0.00231EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/17 2:29 p.m.26 views

CVE-2026-22208 OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access

OpenS100 the reference implementation S-100 viewer prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaLopenlibs without sandboxing or capability restrictions, exposing standard libraries such as...

9.6CVSS0.00231EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/17 2:29 p.m.2 views

CVE-2026-22208

OpenS100 the reference implementation S-100 viewer prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaLopenlibs without sandboxing or capability restrictions, exposing standard libraries such as...

9.6CVSS6.6AI score0.00231EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/17 2:29 p.m.4 views

CVE-2026-22208 OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access

OpenS100 the reference implementation S-100 viewer prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaLopenlibs without sandboxing or capability restrictions, exposing standard libraries such as...

9.6CVSS6.6AI score0.00231EPSS
Exploits0References3
CVE
CVE
added 2026/02/17 2:29 p.m.9 views

CVE-2026-22208

OpenS100 (reference S-100 viewer) before commit 753cf29 is vulnerable to remote code execution via an unrestricted Lua interpreter. The Portrayal Engine calls luaL_openlibs() without sandboxing, exposing standard libraries such as os and io to untrusted portrayal catalogues. An attacker can suppl...

9.6CVSS6.6AI score0.00231EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/17 12:0 a.m.3 views

PT-2026-20300

Name of the Vulnerable Software and Affected Versions OpenS100 versions prior to commit 753cf29 Description The software contains a remote code execution issue due to an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaL openlibs without sandboxing or capability...

9.6CVSS6.7AI score0.00231EPSS
Exploits0References12
CNNVD
CNNVD
added 2026/02/17 12:0 a.m.3 views

OpenS100 安全漏洞

OpenS100 is an IHO S-101 ENC viewer developed by S-100Viewer personal developers. OpenS100 has a security vulnerability, which stems from an unrestricted Lua interpreter. This vulnerability could allow attackers to execute arbitrary code through malicious S-100 description directories...

9.6CVSS6.2AI score0.00231EPSS
Exploits0References3
Rows per page
Query Builder