CveMateVulnerability intelligence

Tcl\/Tk vulnerabilities

2 vulnerabilities

Known vulnerabilities in Tcl\/Tk, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2016-2337ruby +4 more9y agoruby rubyType confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution.CVSS9.8CriticalEPSS6.15%RoutineCVE-2007-4772canonical · ubuntu_linux +3 more18y agocanonical ubuntu_linuxThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.CVSS4.0MediumEPSS3.81%