BP
Product
Blockchain Platform
On CISA KEVExploited in the wild
40
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 32Medium 8Low 0
Watch
Add Blockchain Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: before 21.1.2; 21.1.2 |
| CVE-2017-9287 | 6.5 | May 29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability Affected: before 21.1.2 |
| CVE-2020-11022 | 6.1 | Apr 29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: before 21.1.2 |
| CVE-2019-13057 | 4.9 | Jul 26 | An issue was discovered in the server in OpenLDAP before 2.4.48 Affected: before 21.1.2 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: before 21.1.2 |
| CVE-2020-27218 | 4.8 | Nov 28 | In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests… Affected: before 21.1.2 |
| CVE-2017-14159 | 4.7 | Sep 5 | slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging… Affected: before 21.1.2 |
| CVE-2020-15719 | 4.2 | Jul 14 | libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support Affected: before 21.1.2 |
Showing 8