AI
Product
Active IQ Unified Manager
On CISA KEVExploited in the wildRansomware-linked
848
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 54High 179Medium 267Low 0
Watch
Add Active IQ Unified Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21147 | 7.4 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2023-0361 | 7.4 | Feb 15 | A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS Affected: All versions, or not specified |
| CVE-2021-20322 | 7.4 | Feb 18 | A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP… Affected: All versions, or not specified |
| CVE-2020-15778 | 7.4 | Jul 24 | scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument Affected: 9.5 and later |
| CVE-2020-14593 | 7.4 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 7.3 and later; 9.5 and later |
| CVE-2024-47561 | 7.3 | Oct 3 | Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code Affected: All versions, or not specified |
| CVE-2024-2961 | 7.3 | Apr 17 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT… Affected: All versions, or not specified |
| CVE-2022-1292 | 7.3 | May 3 | The c_rehash script allows command injection Affected: All versions, or not specified |
| CVE-2021-2144 | 7.2 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2021-23337 | 7.2 | Feb 15 | Command Injection Affected: All versions, or not specified |
| CVE-2020-14828 | 7.2 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2020-14697 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2020-14678 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2020-14663 | 7.2 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: All versions, or not specified |
| CVE-2022-0891 | 7.1 | Mar 10 | A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted… Affected: All versions, or not specified |
| CVE-2020-9383 | 7.1 | Feb 25 | An issue was discovered in the Linux kernel 3.16 through 5.5.6 Affected: All versions, or not specified |
| CVE-2020-8648 | 7.1 | Feb 6 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c Affected: All versions, or not specified |
| CVE-2018-2562 | 7.1 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10309 | 7.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10125 | 7.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.3 and later; 9.5 and later |
| CVE-2016-10165 | 7.1 | Feb 3 | The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted… Affected: 7.3 and later; 9.5 and later |
| CVE-2022-28734 | 7.0 | Jul 20 | Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position Affected: All versions, or not specified |
| CVE-2022-3649 | 7.0 | Oct 21 | Linux Kernel BPF inode.c nilfs_new_inode use after free Affected: All versions, or not specified |
| CVE-2022-28796 | 7.0 | Apr 8 | jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition Affected: All versions, or not specified |
| CVE-2022-26488 | 7.0 | Mar 7 | In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured Affected: All versions, or not specified |
| CVE-2021-41617 | 7.0 | Sep 26 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as… Affected: All versions, or not specified |
| CVE-2020-1752 | 7.0 | Apr 30 | A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out Affected: 9.5 and later |
| CVE-2020-11884 | 7.0 | Apr 29 | In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in… Affected: All versions, or not specified |
| CVE-2019-18683 | 7.0 | Nov 4 | An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8 Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)