Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 60
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2023-08-22 | CVE-2021-32292 | critical | CVE-2021-32292: An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) thro |
| 2023-03-17 | CVE-2023-28531 | critical | CVE-2023-28531: ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the inten |
| 2023-02-23 | CVE-2023-23914 | critical | CVE-2023-23914: A cleartext transmission of sensitive information vulnerability exists in curl < |
| 2022-12-05 | CVE-2022-32221 | critical | CVE-2022-32221: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (` |
| 2022-09-01 | CVE-2020-35527 | critical | CVE-2020-35527: In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE f |
| 2022-08-05 | CVE-2022-37434 | critical | CVE-2022-37434: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in infl |
| 2022-07-07 | CVE-2022-32207 | critical | CVE-2022-32207: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes |
| 2022-07-01 | CVE-2022-2274 | critical | CVE-2022-2274: The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for |
| 2022-05-04 | CVE-2022-29155 | critical | CVE-2022-29155: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerabil |
| 2022-01-24 | CVE-2022-23852 | critical | CVE-2022-23852: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer |
| 2021-12-10 | CVE-2021-44228 | critical | CVE-2021-44228: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 |
| 2021-09-23 | CVE-2021-22945 | critical | CVE-2021-22945: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some |
| 2021-09-16 | CVE-2021-40438 | critical | CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig |
| 2021-08-24 | CVE-2021-3711 | critical | CVE-2021-3711: In order to decrypt SM2 encrypted data an application is expected to call the AP |
| 2021-07-22 | CVE-2021-35942 | critical | CVE-2021-35942: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or |
| 2021-06-02 | CVE-2021-3520 | critical | CVE-2021-3520: There's a flaw in lz4. An attacker who submits a crafted file to an application |
| 2021-05-25 | CVE-2021-33574 | critical | CVE-2021-33574: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 h |
| 2021-05-04 | CVE-2021-23383 | medium | CVE-2021-23383: The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when s |
| 2021-03-23 | CVE-2021-21345 | medium | CVE-2021-21345: XStream is a Java library to serialize objects to XML and back again. In XStream |
| 2021-03-23 | CVE-2021-21350 | medium | CVE-2021-21350: XStream is a Java library to serialize objects to XML and back again. In XStream |
| 2021-03-23 | CVE-2021-21346 | medium | CVE-2021-21346: XStream is a Java library to serialize objects to XML and back again. In XStream |
| 2021-03-23 | CVE-2021-21347 | medium | CVE-2021-21347: XStream is a Java library to serialize objects to XML and back again. In XStream |
| 2021-03-23 | CVE-2021-21351 | medium | CVE-2021-21351: XStream is a Java library to serialize objects to XML and back again. In XStream |
| 2021-03-23 | CVE-2021-21342 | medium | CVE-2021-21342: XStream is a Java library to serialize objects to XML and back again. In XStream |
| 2021-03-23 | CVE-2021-21344 | medium | CVE-2021-21344: XStream is a Java library to serialize objects to XML and back again. In XStream |
| 2021-03-12 | CVE-2021-20231 | critical | CVE-2021-20231: A flaw was found in gnutls. A use after free issue in client sending key_share e |
| 2021-01-19 | CVE-2021-3177 | critical | CVE-2021-3177: Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callpro |
| 2020-07-17 | CVE-2020-15801 | critical | CVE-2020-15801: In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ign |
| 2020-05-01 | CVE-2020-10683 | critical | CVE-2020-10683: dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Enti |
| 2020-04-09 | CVE-2020-11656 | critical | CVE-2020-11656: In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, a |
| 2020-03-02 | CVE-2019-14893 | critical | CVE-2019-14893: A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.1 |
| 2020-03-02 | CVE-2020-9548 | critical | CVE-2020-9548: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee |
| 2020-03-02 | CVE-2020-9546 | critical | CVE-2020-9546: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee |
| 2020-03-02 | CVE-2020-9547 | critical | CVE-2020-9547: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee |
| 2020-02-24 | CVE-2020-1938 | critical | CVE-2020-1938: When using the Apache JServ Protocol (AJP), care must be taken when trusting inc |
| 2020-02-10 | CVE-2020-8840 | critical | CVE-2020-8840: FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JN |
| 2020-01-03 | CVE-2019-20330 | critical | CVE-2019-20330: FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache bloc |
| 2019-12-09 | CVE-2019-19646 | critical | CVE-2019-19646: pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAG |
| 2019-12-05 | CVE-2019-19317 | critical | CVE-2019-19317: lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in |
| 2019-10-12 | CVE-2019-17531 | critical | CVE-2019-17531: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th |
| 2019-10-07 | CVE-2019-17267 | critical | CVE-2019-17267: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2 |
| 2019-10-01 | CVE-2019-16943 | critical | CVE-2019-16943: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th |
| 2019-10-01 | CVE-2019-16942 | critical | CVE-2019-16942: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th |
| 2019-09-16 | CVE-2019-5482 | critical | CVE-2019-5482: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. |
| 2019-09-16 | CVE-2019-5481 | critical | CVE-2019-5481: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. |
| 2019-09-15 | CVE-2019-16335 | critical | CVE-2019-16335: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2 |
| 2019-09-15 | CVE-2019-14540 | critical | CVE-2019-14540: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2 |
| 2019-07-29 | CVE-2019-14379 | critical | CVE-2019-14379: SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles de |
| 2019-06-07 | CVE-2019-10160 | critical | CVE-2019-10160: A security regression of CVE-2019-9636 was discovered in python since commit d53 |
| 2019-03-25 | CVE-2019-3860 | medium | CVE-2019-3860: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFT |
| 2019-03-25 | CVE-2019-3861 | medium | CVE-2019-3861: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH |
| 2019-03-21 | CVE-2019-3859 | critical | CVE-2019-3859: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh |
| 2019-03-21 | CVE-2019-3858 | medium | CVE-2019-3858: An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a special |
| 2019-03-21 | CVE-2019-3862 | high | CVE-2019-3862: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH |
| 2019-02-26 | CVE-2019-9169 | critical | CVE-2019-9169: In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in pos |
| 2019-01-02 | CVE-2018-14719 | critical | CVE-2018-14719: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec |
| 2019-01-02 | CVE-2018-14718 | critical | CVE-2018-14718: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec |
| 2018-05-16 | CVE-2018-8014 | critical | CVE-2018-8014: The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to |
| 2018-02-06 | CVE-2017-15095 | critical | CVE-2017-15095: A deserialization flaw was discovered in the jackson-databind in versions before |
| 2018-02-06 | CVE-2017-7525 | critical | CVE-2017-7525: A deserialization flaw was discovered in the jackson-databind, versions before 2 |
FEDRAMP CATALOG PRODUCTS · 1
| PRODUCT | STATUS | IMPACT |
|---|---|---|
| Cloud Insights | In Process | High |