CB
Product
Cloud Backup
On CISA KEVExploited in the wildRansomware-linked
339
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 146Medium 140Low 16
Watch
Add Cloud Backup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-2964 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2018-2942 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL) Affected: All versions, or not specified |
| CVE-2018-2941 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified |
| CVE-2018-2826 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2018-2825 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2018-2638 | 8.3 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: All versions, or not specified |
| CVE-2017-10116 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: All versions, or not specified |
| CVE-2017-10114 | 8.3 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified |
| CVE-2017-10074 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: All versions, or not specified |
| CVE-2023-28656 | 8.1 | May 3 | NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have… Affected: All versions, or not specified |
| CVE-2021-22901 | 8.1 | Jun 11 | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection Affected: All versions, or not specified |
| CVE-2020-8625 | 8.1 | Feb 17 | BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features Affected: All versions, or not specified |
| CVE-2020-36182 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36180 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36179 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36184 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36183 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36185 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36186 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36187 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36188 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-36189 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: All versions, or not specified |
| CVE-2020-14305 | 8.1 | Dec 2 | An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720 Affected: All versions, or not specified |
| CVE-2020-5867 | 8.1 | Apr 23 | In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages Affected: All versions, or not specified |
| CVE-2019-13115 | 8.1 | Jul 16 | In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets… Affected: All versions, or not specified |
| CVE-2017-10078 | 8.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: All versions, or not specified |
| CVE-2021-0156 | 7.8 | Feb 9 | Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2021-0117 | 7.8 | Feb 9 | Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2021-0116 | 7.8 | Feb 9 | Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2018-25020 | 7.8 | Dec 8 | The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into… Affected: All versions, or not specified |
| CVE-2021-42252 | 7.8 | Oct 11 | An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6 Affected: All versions, or not specified |
| CVE-2021-41864 | 7.8 | Oct 2 | prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a… Affected: All versions, or not specified |
| CVE-2021-38300 | 7.8 | Sep 20 | arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code… Affected: All versions, or not specified |
| CVE-2021-41073 | 7.8 | Sep 19 | loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel… Affected: All versions, or not specified |
| CVE-2021-3612 | 7.8 | Jul 9 | An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP Affected: All versions, or not specified |
| CVE-2021-28691 | 7.8 | Jun 29 | Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel… Affected: All versions, or not specified |
| CVE-2020-12360 | 7.8 | Jun 9 | Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2019-25045 | 7.8 | Jun 7 | An issue was discovered in the Linux kernel before 5.0.19 Affected: All versions, or not specified |
| CVE-2021-33200 | 7.8 | May 27 | kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579 Affected: All versions, or not specified |
| CVE-2020-25669 | 7.8 | May 26 | A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed Affected: All versions, or not specified |
| CVE-2021-22543 | 7.8 | May 26 | An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the… Affected: All versions, or not specified |
| CVE-2020-25671 | 7.8 | May 26 | A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations Affected: All versions, or not specified |
| CVE-2020-25670 | 7.8 | May 26 | A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations Affected: All versions, or not specified |
| CVE-2021-3483 | 7.8 | May 17 | A flaw was found in the Nosy driver in the Linux kernel Affected: All versions, or not specified |
| CVE-2019-25044 | 7.8 | May 14 | The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka… Affected: All versions, or not specified |
| CVE-2021-23134 | 7.8 | May 12 | Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges Affected: All versions, or not specified |
| CVE-2020-35519 | 7.8 | May 6 | An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5 Affected: All versions, or not specified |
| CVE-2021-29154 | 7.8 | Apr 8 | BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context Affected: All versions, or not specified |
| CVE-2021-28952 | 7.8 | Mar 20 | An issue was discovered in the Linux kernel through 5.11.8 Affected: All versions, or not specified |
| CVE-2021-28375 | 7.8 | Mar 15 | An issue was discovered in the Linux kernel through 5.11.6 Affected: All versions, or not specified |
