SN
Product
Snapcenter
On CISA KEVExploited in the wildRansomware-linked
576
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 27High 44Medium 429Low 0
Watch
Add Snapcenter to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35590 | 6.3 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2020-2768 | 6.3 | Apr 15 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2019-2969 | 6.2 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: All versions, or not specified |
| CVE-2021-2307 | 6.1 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging) Affected: All versions, or not specified |
| CVE-2021-28957 | 6.1 | Mar 21 | An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3 Affected: All versions, or not specified |
| CVE-2020-27783 | 6.1 | Dec 3 | A XSS vulnerability was discovered in python-lxml's clean module Affected: All versions, or not specified |
| CVE-2020-11022 | 6.1 | Apr 29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: All versions, or not specified |
| CVE-2019-11358 | 6.1 | Apr 20 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: All versions, or not specified |
| CVE-2016-7103 | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog… Affected: All versions, or not specified |
| CVE-2010-5312 | 6.1 | Nov 24 | Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via… Affected: All versions, or not specified |
| CVE-2023-22053 | 5.9 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: All versions, or not specified |
| CVE-2022-21519 | 5.9 | Jul 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: All versions, or not specified |
| CVE-2022-21457 | 5.9 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin) Affected: All versions, or not specified |
| CVE-2021-2389 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: All versions, or not specified |
| CVE-2021-23841 | 5.9 | Feb 16 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509… Affected: All versions, or not specified |
| CVE-2021-23336 | 5.9 | Feb 15 | Web Cache Poisoning Affected: All versions, or not specified |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: All versions, or not specified |
| CVE-2020-2804 | 5.9 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached) Affected: All versions, or not specified |
| CVE-2020-2574 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2020-2573 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: All versions, or not specified |
| CVE-2018-0734 | 5.9 | Oct 30 | Timing attack against DSA Affected: All versions, or not specified |
| CVE-2018-3144 | 5.9 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: All versions, or not specified |
| CVE-2018-2761 | 5.9 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified |
| CVE-2021-3426 | 5.7 | May 20 | There's a flaw in Python 3's pydoc Affected: All versions, or not specified |
| CVE-2024-21015 | 5.5 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2023-21929 | 5.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2022-21528 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21527 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21509 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-24823 | 5.5 | May 6 | Netty is an open-source, asynchronous event-driven network application framework Affected: All versions, or not specified |
| CVE-2022-21479 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21478 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21459 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21440 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2022-21425 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: All versions, or not specified |
| CVE-2022-23234 | 5.5 | Mar 16 | SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials Affected: before 4.5 |
| CVE-2021-22570 | 5.5 | Jan 26 | Nullptr dereference when a null char is present in a proto symbol Affected: All versions, or not specified |
| CVE-2022-21301 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: All versions, or not specified |
| CVE-2021-35612 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35604 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2021-2304 | 5.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: All versions, or not specified |
| CVE-2021-21290 | 5.5 | Feb 8 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files Affected: All versions, or not specified |
| CVE-2020-17521 | 5.5 | Dec 7 | Apache Groovy provides extension methods to aid with creating temporary directories Affected: All versions, or not specified |
| CVE-2020-14651 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-14643 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: All versions, or not specified |
| CVE-2020-2760 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2019-2991 | 5.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2019-2436 | 5.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
