Aerospike kayıtları
aerospike üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %11,1
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %22,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-787 Out-of-bounds Write3
- CWE-129 Improper Validation of Array Index1
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-125 Out-of-bounds Read1
- CWE-502 Deserialization of Untrusted Data1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
65Bu hafta | CVE-2020-13151Silahlaştırılmış | Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, asaerospike · aerospike server · CWE-78 | Kritik9,8 | — | %86,5 | 5 Ağu 2020 |
41Planlayın | CVE-2016-9054İstismar yok | An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.aerospike · database server · CWE-787 | Kritik9,8 | — | %7,7 | 26 Oca 2017 |
41Planlayın | CVE-2016-9052İstismar yok | An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.aerospike · database server · CWE-787 | Kritik9,8 | — | %7,7 | 26 Oca 2017 |
41Planlayın | CVE-2016-9053İstismar yok | An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3.aerospike · database server · CWE-129 | Kritik9,8 | — | %7,2 | 21 Şub 2017 |
41Planlayın | CVE-2016-9051İstismar yok | An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.aerospike · database server · CWE-787 | Kritik9,8 | — | %6,8 | 21 Şub 2017 |
40Planlayın | CVE-2023-36480İstismar yok | Aerospike Java Client vulnerable to unsafe deserialization of server responsesaerospike · aerospike java client · CWE-502 | Kritik9,8 | — | %1,7 | 4 Ağu 2023 |
33İzleyin | CVE-2016-9050İstismar yok | An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3.aerospike · database server · CWE-125 | Yüksek8,2 | — | %2,8 | 26 Oca 2017 |
33İzleyin | CVE-2016-10558İstismar yok | aerospike is an Aerospike add-on module for Node.js.aerospike · aerospike · CWE-311 | Yüksek8,1 | — | %1,6 | 29 May 2018 |
31İzleyin | CVE-2016-9049İstismar yok | An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3.aerospike · database server · CWE-476 | Yüksek7,5 | — | %2,9 | 21 Şub 2017 |
- CVE-2020-1315165Bu hafta
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as
KritikCVSS 9,8SilahlaştırılmışEPSS %86aerospike · aerospike server5 Ağu 2020
- CVE-2016-905441Planlayın
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.
KritikCVSS 9,8İstismar yokEPSS %7aerospike · database server26 Oca 2017
- CVE-2016-905241Planlayın
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.
KritikCVSS 9,8İstismar yokEPSS %7aerospike · database server26 Oca 2017
- CVE-2016-905341Planlayın
An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3.
KritikCVSS 9,8İstismar yokEPSS %7aerospike · database server21 Şub 2017
- CVE-2016-905141Planlayın
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.
KritikCVSS 9,8İstismar yokEPSS %6aerospike · database server21 Şub 2017
- CVE-2023-3648040Planlayın
Aerospike Java Client vulnerable to unsafe deserialization of server responses
KritikCVSS 9,8İstismar yokEPSS %1aerospike · aerospike java client4 Ağu 2023
- CVE-2016-905033İzleyin
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3.
YüksekCVSS 8,2İstismar yokEPSS %2aerospike · database server26 Oca 2017
- CVE-2016-1055833İzleyin
aerospike is an Aerospike add-on module for Node.js.
YüksekCVSS 8,1İstismar yokEPSS %1aerospike · aerospike29 May 2018
- CVE-2016-904931İzleyin
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3.
YüksekCVSS 7,5İstismar yokEPSS %2aerospike · database server21 Şub 2017