yugabyte kayıtları
yugabyte üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %27,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-117 Improper Output Neutralization for Logs1
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-16 Configuration1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-23 Relative Path Traversal1
- CWE-284 Improper Access Control1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-37397İstismar yok | The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directoryyugabyte · yugabytedb · CWE-16 | Kritik9,8 | — | %0,9 | 12 Ağu 2022 |
39İzleyin | CVE-2023-0575İstismar yok | Remote Code Executionyugabyte · yugabytedb · CWE-94 | Kritik9,8 | — | %0,8 | 9 Şub 2023 |
39İzleyin | CVE-2023-0574İstismar yok | Server-Side Request Forgeryyugabyte · yugabytedb managed · CWE-307 | Kritik9,8 | — | %0,6 | 9 Şub 2023 |
39İzleyin | CVE-2023-0745İstismar yok | Arbitrary File Write in High Availability Backup Uploadyugabyte · yugabytedb managed · CWE-23 | Kritik9,8 | — | %0,5 | 9 Şub 2023 |
32İzleyin | CVE-2019-3800İstismar yok | CF CLI writes the client id and secret to config filepivotal · cloud foundry command line interface · CWE-522 | Yüksek7,8 | — | %2,1 | 5 Ağu 2019 |
30İzleyin | CVE-2023-6001İstismar yok | Prometheus Metrics Accessible Pre-Authenticationyugabyte · yugabytedb · CWE-200 | Yüksek7,5 | — | %0,6 | 7 Kas 2023 |
30İzleyin | CVE-2024-41435İstismar yok | YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.yugabyte · yugabytedb · CWE-120 | Yüksek7,5 | — | %0,5 | 3 Eyl 2024 |
30İzleyin | CVE-2023-4640İstismar yok | Set Logging Level Without Authenticationyugabyte · yugabytedb · CWE-284 | Yüksek7,5 | — | %0,4 | 30 Ağu 2023 |
24İzleyin | CVE-2023-6002İstismar yok | YugabyteDB is vulnerable to cross site scripting (XSS) via log injection.yugabyte · yugabytedb · CWE-117 | Orta6,1 | — | %0,4 | 7 Kas 2023 |
24İzleyin | CVE-2024-6895İstismar yok | Insecure Account Profile Managementyugabytedb · yugabytedb anywhere · CWE-306 | Orta6,1 | — | %0,2 | 19 Tem 2024 |
21İzleyin | CVE-2024-0006İstismar yok | DB User Password Leak in Application Logyugabytedb · yugabytedb anywhere · CWE-532 | Orta5,4 | — | %0,3 | 19 Tem 2024 |
- CVE-2022-3739739İzleyin
The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory
KritikCVSS 9,8İstismar yokEPSS %1yugabyte · yugabytedb12 Ağu 2022
- CVE-2023-057539İzleyin
Remote Code Execution
KritikCVSS 9,8İstismar yokEPSS %1yugabyte · yugabytedb9 Şub 2023
- CVE-2023-057439İzleyin
Server-Side Request Forgery
KritikCVSS 9,8İstismar yokEPSS %1yugabyte · yugabytedb managed9 Şub 2023
- CVE-2023-074539İzleyin
Arbitrary File Write in High Availability Backup Upload
KritikCVSS 9,8İstismar yokEPSS %1yugabyte · yugabytedb managed9 Şub 2023
- CVE-2019-380032İzleyin
CF CLI writes the client id and secret to config file
YüksekCVSS 7,8İstismar yokEPSS %2pivotal · cloud foundry command line interface5 Ağu 2019
- CVE-2023-600130İzleyin
Prometheus Metrics Accessible Pre-Authentication
YüksekCVSS 7,5İstismar yokEPSS %1yugabyte · yugabytedb7 Kas 2023
- CVE-2024-4143530İzleyin
YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.
YüksekCVSS 7,5İstismar yokEPSS %1yugabyte · yugabytedb3 Eyl 2024
- CVE-2023-464030İzleyin
Set Logging Level Without Authentication
YüksekCVSS 7,5İstismar yokEPSS %0yugabyte · yugabytedb30 Ağu 2023
- CVE-2023-600224İzleyin
YugabyteDB is vulnerable to cross site scripting (XSS) via log injection.
OrtaCVSS 6,1İstismar yokEPSS %0yugabyte · yugabytedb7 Kas 2023
- CVE-2024-689524İzleyin
Insecure Account Profile Management
OrtaCVSS 6,1İstismar yokEPSS %0yugabytedb · yugabytedb anywhere19 Tem 2024
- CVE-2024-000621İzleyin
DB User Password Leak in Application Log
OrtaCVSS 5,4İstismar yokEPSS %0yugabytedb · yugabytedb anywhere19 Tem 2024