SN
Product
Snapcenter
On CISA KEVExploited in the wildRansomware-linked
576
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 27High 44Medium 429Low 0
Watch
Add Snapcenter to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: All versions, or not specified |
| CVE-2018-0734 | 5.9 | Oct 30 | Timing attack against DSA Affected: All versions, or not specified |
| CVE-2018-3144 | 5.9 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: All versions, or not specified |
| CVE-2018-2761 | 5.9 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified |
| CVE-2021-3426 | 5.7 | May 20 | There's a flaw in Python 3's pydoc Affected: All versions, or not specified |
| CVE-2024-21015 | 5.5 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2023-21929 | 5.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2022-21528 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21527 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21509 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-24823 | 5.5 | May 6 | Netty is an open-source, asynchronous event-driven network application framework Affected: All versions, or not specified |
| CVE-2022-21479 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21478 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21459 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21440 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21425 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2022-23234 | 5.5 | Mar 16 | SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials Affected: before 4.5 |
| CVE-2021-22570 | 5.5 | Jan 26 | Nullptr dereference when a null char is present in a proto symbol Affected: All versions, or not specified |
| CVE-2022-21301 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-35612 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35604 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-2304 | 5.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2021-21290 | 5.5 | Feb 8 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files Affected: All versions, or not specified |
| CVE-2020-17521 | 5.5 | Dec 7 | Apache Groovy provides extension methods to aid with creating temporary directories Affected: All versions, or not specified |
| CVE-2020-14651 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-14643 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-2760 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2019-2991 | 5.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2436 | 5.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified |
| CVE-2018-3247 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: All versions, or not specified |
| CVE-2018-3195 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified |
| CVE-2018-3187 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2018-3185 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified |
| CVE-2018-8026 | 5.5 | Jul 5 | This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred… Affected: All versions, or not specified |
| CVE-2018-2812 | 5.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2024-21987 | 5.4 | Feb 16 | SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter Server user to modify system logging configuration settings Affected: 4.8 before 5.0 |
| CVE-2021-29489 | 5.4 | May 5 | Highcharts JS is a JavaScript charting library based on SVG Affected: All versions, or not specified |
| CVE-2020-4051 | 5.4 | Jun 15 | In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to… Affected: All versions, or not specified |
| CVE-2024-20994 | 5.3 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: All versions, or not specified |
| CVE-2023-21971 | 5.3 | Apr 18 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) Affected: All versions, or not specified |
| CVE-2022-2097 | 5.3 | Jul 5 | AES OCB fails to encrypt some bytes Affected: 0 |
| CVE-2022-21302 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-21254 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35608 | 5.3 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: All versions, or not specified |
| CVE-2021-28164 | 5.3 | Apr 1 | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: All versions, or not specified |
| CVE-2020-27223 | 5.3 | Feb 26 | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: All versions, or not specified |
| CVE-2021-3281 | 5.3 | Feb 2 | In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows… Affected: All versions, or not specified |
| CVE-2020-13956 | 5.3 | Dec 2 | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: All versions, or not specified |
| CVE-2020-2806 | 5.3 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: All versions, or not specified |
| CVE-2020-2752 | 5.3 | Apr 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)