AI
Product
Active IQ Unified Manager
On CISA KEVExploited in the wildRansomware-linked
848
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 54High 179Medium 267Low 0
Watch
Add Active IQ Unified Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10719 | 6.5 | May 26 | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes Affected: All versions, or not specified |
| CVE-2020-13143 | 6.5 | May 18 | gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value,… Affected: All versions, or not specified |
| CVE-2020-2790 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-2780 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 7.3 and later; 9.5 and later |
| CVE-2019-20446 | 6.5 | Feb 2 | In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing Affected: All versions, or not specified |
| CVE-2020-2686 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2020-2627 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2020-2579 | 6.5 | Jan 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-5108 | 6.5 | Dec 23 | An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3 Affected: All versions, or not specified |
| CVE-2019-3011 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API) Affected: All versions, or not specified |
| CVE-2019-3004 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: All versions, or not specified |
| CVE-2019-2967 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2966 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2946 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS) Affected: All versions, or not specified |
| CVE-2019-2914 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-16168 | 6.5 | Sep 9 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe… Affected: 7.3 and later; 9.5 and later |
| CVE-2019-2455 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-1000873 | 6.5 | Dec 20 | Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS) Affected: 7.3 and later; 7.3 and later; 9.5 and later |
| CVE-2018-3133 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 7.3 and later |
| CVE-2018-3721 | 6.5 | Jun 7 | lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a… Affected: All versions, or not specified |
| CVE-2018-2819 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2817 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2784 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2782 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2668 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2665 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2640 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2622 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 and later; 9.5 and later |
| CVE-2018-2612 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10384 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10379 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10378 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10243 | 6.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-15707 | 6.4 | Jul 29 | Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the… Affected: 9.5 and later |
| CVE-2020-10690 | 6.4 | May 8 | There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation Affected: All versions, or not specified |
| CVE-2019-2503 | 6.4 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling) Affected: 7.3 and later; 9.5 and later |
| CVE-2024-2379 | 6.3 | Mar 27 | QUIC certificate check bypass with wolfSSL Affected: All versions, or not specified |
| CVE-2023-20862 | 6.3 | Apr 19 | In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not properly clean the security… Affected: All versions, or not specified |
| CVE-2022-21550 | 6.3 | Jul 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21490 | 6.3 | Apr 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21489 | 6.3 | Apr 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21483 | 6.3 | Apr 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21482 | 6.3 | Apr 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2021-35621 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2020-2768 | 6.3 | Apr 15 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.3 and later; 9.5 and later |
| CVE-2019-2969 | 6.2 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: All versions, or not specified |
| CVE-2017-10356 | 6.2 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.3 and later; 9.5 and later |
| CVE-2022-35278 | 6.1 | Aug 23 | In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an… Affected: All versions, or not specified |
| CVE-2022-24891 | 6.1 | Apr 27 | ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library Affected: All versions, or not specified |
| CVE-2021-35043 | 6.1 | Jul 19 | OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)