Pax Project Pax — known CVE vulnerabilities

Every CVE whose affected-product data names Pax Project Pax, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-1193 — CVSS 5.0 (medium): Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname…
• CVE-2015-1194 — CVSS 4.3 (medium): pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.