Helix vulnerabilities
9 vulnerabilities
Known vulnerabilities in Helix products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Helix Core8 vulnerabilities
- Helix Swarm1 vulnerabilities
- Sync1 vulnerabilities
CVE-2024-0325helixsync+1
EPSS score0.75%
In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins.CVE-2024-10314helixhelix coreEPSS score0.49%
In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the auto-generation function was identified. Reported by Karol Więsek.CVE-2024-10344helixhelix coreEPSS score0.49%
In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was identified. Reported by Karol Więsek.CVE-2024-10345helixhelix coreEPSS score0.49%
In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Karol Więsek.CVE-2024-8067helixhelix coreEPSS score0.20%
In versions of Helix Core prior to 2024.1 Patch 2 (2024.1/2655224) a Windows ANSI API Unicode "best fit" argument injection was identified.CVE-2023-5759helixhelix core+1EPSS score0.95%
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified. Reported by Jason Geffner.CVE-2023-45319helixhelix core+1EPSS score0.95%
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the commit function was identified. Reported by Jason Geffner.CVE-2023-45849helixhelix core+1EPSS score1.11%
An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.CVE-2023-35767helixhelix core+2EPSS score0.95%
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Jason Geffner.