Lucene search
Tinycheck Security Vulnerabilities
cve
In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data.
9.8CVSS
9.1AI Score
0.002EPSS
2021-01-19 05:15 PM
24
2
cve
TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.
9.8CVSS
9.6AI Score
0.002EPSS
2021-01-26 06:15 PM
25
2
cve
TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.
6.5CVSS
6.3AI Score
0.001EPSS
2021-01-26 06:15 PM
21
2