Rezultati pretraživanja za 'Proizvođač: yugabyte'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-41435 | 7.5 | YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter. | 2025-07-03 12:52:19 | 2024-09-03 19:15:14 |
| CVE-2023-0745 | 9.8 | The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters. This vulnerability is associa | 2023-11-10 23:15:00 | 2023-02-09 17:15:00 |
| CVE-2023-0575 | 9.8 | External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows AP | 2023-11-10 23:15:00 | 2023-02-09 17:15:00 |
| CVE-2023-0574 | 9.8 | Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functional | 2023-11-10 23:15:00 | 2023-02-09 15:15:00 |
| CVE-2022-37397 | 9.8 | An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password. | 2022-08-16 15:44:00 | 2022-08-12 20:15:00 |
| CVE-2019-3800 | 2.1 | CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file ca | 2019-10-09 23:49:00 | 2019-08-05 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/1
Zapisa po stranici: