AI
Product
Active IQ Unified Manager
On CISA KEVExploited in the wildRansomware-linked
849
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 54High 179Medium 267Low 0
Watch
Add Active IQ Unified Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-19186 | 6.5 | Aug 22 | Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: All versions, or not specified |
| CVE-2020-19188 | 6.5 | Aug 22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: All versions, or not specified |
| CVE-2020-19187 | 6.5 | Aug 22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: All versions, or not specified |
| CVE-2020-19185 | 6.5 | Aug 22 | Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: All versions, or not specified |
| CVE-2020-19189 | 6.5 | Aug 22 | Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: All versions, or not specified |
| CVE-2020-19190 | 6.5 | Aug 22 | Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: All versions, or not specified |
| CVE-2023-36054 | 6.5 | Aug 7 | lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer Affected: All versions, or not specified |
| CVE-2023-3338 | 6.5 | Jun 30 | Crash due to a null pointer dereference in the dn_nsp_send function Affected: All versions, or not specified |
| CVE-2023-21946 | 6.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-23240 | 6.5 | Feb 28 | Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update… Affected: before 9.11p1; before 9.11p1; before 9.11p1 |
| CVE-2023-23915 | 6.5 | Feb 23 | A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested… Affected: All versions, or not specified |
| CVE-2022-3597 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a… Affected: All versions, or not specified |
| CVE-2022-3599 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: All versions, or not specified |
| CVE-2022-3626 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a… Affected: All versions, or not specified |
| CVE-2022-3627 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a… Affected: All versions, or not specified |
| CVE-2022-3598 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: All versions, or not specified |
| CVE-2021-4209 | 6.5 | Aug 24 | A NULL pointer dereference flaw was found in GnuTLS Affected: All versions, or not specified |
| CVE-2022-34526 | 6.5 | Jul 29 | A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0 Affected: All versions, or not specified |
| CVE-2022-21569 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21556 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-34903 | 6.5 | Jul 1 | GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met,… Affected: All versions, or not specified |
| CVE-2022-2058 | 6.5 | Jun 30 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: All versions, or not specified |
| CVE-2022-2057 | 6.5 | Jun 30 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: All versions, or not specified |
| CVE-2022-2056 | 6.5 | Jun 30 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: All versions, or not specified |
| CVE-2022-29824 | 6.5 | May 3 | In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows Affected: All versions, or not specified |
| CVE-2022-21454 | 6.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: All versions, or not specified |
| CVE-2022-0865 | 6.5 | Mar 10 | Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: All versions, or not specified |
| CVE-2022-23437 | 6.5 | Jan 24 | Infinite loop within Apache XercesJ xml parser Affected: All versions, or not specified |
| CVE-2021-3541 | 6.5 | Jul 9 | A flaw was found in libxml2 Affected: All versions, or not specified |
| CVE-2021-25214 | 6.5 | Apr 29 | In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as… Affected: All versions, or not specified |
| CVE-2021-2298 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-2202 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2178 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: All versions, or not specified |
| CVE-2021-2172 | 6.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2020-25711 | 6.5 | Dec 3 | A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations Affected: All versions, or not specified |
| CVE-2020-25689 | 6.5 | Nov 2 | A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly… Affected: All versions, or not specified |
| CVE-2020-14846 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14836 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14830 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14827 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth) Affected: All versions, or not specified |
| CVE-2020-14800 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-14775 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: through 7.3; 9.5 and later |
| CVE-2020-14769 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-14765 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-24977 | 6.5 | Sep 3 | GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c Affected: 7.3 and later; 9.5 and later |
| CVE-2020-14680 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-14619 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-14591 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in) Affected: All versions, or not specified |
| CVE-2020-14576 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF) Affected: All versions, or not specified |
| CVE-2020-14539 | 6.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
