Vulnerabilities

Summary — last 7 days

New vulnerabilities3,414▲ 284 vs. last week
Critical / high1,395▲ 147 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)768▲ 288 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)13%ExploitObjectivity/db1/18/20116/16/2026
The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to (1) the Lock Server or (2) the Advanced Multithreaded Server, as demonstrated…