OS
Product
Osquery
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Osquery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1887 | 9.1 | Mar 13 | Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root… Affected: after 2.9.0 before 4.2.0 |
| CVE-2020-11081 | 8.2 | Jul 10 | osquery before version 4.4.0 enables a privilege escalation vulnerability Affected: before 4.4.0 |
| CVE-2019-3567 | 8.1 | Jun 3 | In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with… Affected: before 3.4.0 |
| CVE-2018-6336 | 7.8 | Dec 31 | An issue was discovered in osquery Affected: before 3.2.7 |
| CVE-2020-26273 | 5.2 | Dec 16 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework Affected: before 4.6.0 |
Showing 5
