Yugabyte vulnerabilities

Products

• Yugabytedb 8
• Yugabytedb Managed 2

Newest

• yugabyte yugabytedb YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter. CVE-2024-41435 7.5 HighSeptember 3, 2024
• yugabyte yugabytedb, yugabytedb anywhere +1 more Insecure Account Profile Management CVE-2024-6895 6.1 MediumJuly 19, 2024
• yugabyte yugabytedb, yugabytedb anywhere +1 more DB User Password Leak in Application Log CVE-2024-0006 5.4 MediumJuly 19, 2024
• yugabyte yugabytedb Log Injection CVE-2023-6002 6.5 MediumNovember 7, 2023
• yugabyte yugabytedb, yugabytedb anywhere +1 more Prometheus Metrics Accessible Pre-Authentication CVE-2023-6001 5.3 MediumNovember 7, 2023
• yugabyte yugabytedb, yugabytedb anywhere +1 more Set Logging Level Without Authentication CVE-2023-4640 6.5 MediumAugust 30, 2023
• yugabyte yugabytedb Remote Code Execution CVE-2023-0575 7.2 HighFebruary 9, 2023
• yugabytedb anywhere, yugabyte yugabytedb managed +1 more Arbitrary File Write in High Availability Backup Upload CVE-2023-0745 6.7 MediumFebruary 9, 2023
• yugabyte yugabytedb managed, yugabytedb anywhere +1 more Server-Side Request Forgery CVE-2023-0574 6.8 MediumFebruary 9, 2023
• yugabyte yugabytedb, yugabyte, inc. yugabyte db +1 more The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory CVE-2022-37397 8.3 HighAugust 12, 2022
• cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 more CF CLI writes the client id and secret to config file CVE-2019-3800 6.3 MediumAugust 5, 2019