CO
Product
Communications Operations Monitor
On CISA KEVExploited in the wild
44
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 19Medium 18Low 0
Watch
Add Communications Operations Monitor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44790 | 9.8 | Dec 20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts) Affected: 4.3; 4.4; 5.0 |
| CVE-2019-5482 | 9.8 | Sep 16 | Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3 Affected: 3.4; 4.0; 4.1; 4.2; 4.3 |
| CVE-2019-5481 | 9.8 | Sep 16 | Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3 Affected: 3.4; 4.0; 4.1; 4.2; 4.3 |
| CVE-2019-7164 | 9.8 | Feb 20 | SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter Affected: 4.2; 4.3 |
| CVE-2019-3822 | 9.8 | Feb 6 | libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow Affected: 3.4; 4.0 |
| CVE-2018-11219 | 9.8 | Jun 17 | An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of… Affected: 3.4; 4.0 |
| CVE-2018-11218 | 9.8 | Jun 17 | Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer… Affected: 3.4; 4.0 |
Showing 7