Vendors / Aerospike Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6
CVSS high 3
Exploited now Aerospike records in CISA KEV No Aerospike vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 84
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as part of a database query.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86516 · Published 2020-08-05 · No fix listed CWE-78
Priority HIGH 82
The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01776 · Published 2023-08-04 · Fixed in 6.2.0, 5.2.0 +1 CWE-502
Priority MEDIUM 53
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.077 · Published 2017-01-26 · No fix listed CWE-787
Priority MEDIUM 53
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.077 · Published 2017-01-26 · No fix listed CWE-787
Priority MEDIUM 52
An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07249 · Published 2017-02-21 · No fix listed CWE-129
Priority MEDIUM 52
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06862 · Published 2017-02-21 · No fix listed CWE-787
Priority MEDIUM 41
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.02889 · Published 2017-01-26 · No fix listed CWE-125
Priority LOW 39
aerospike is an Aerospike add-on module for Node.js.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.01692 · Published 2018-05-29 · Fixed in 2.4.2 CWE-311
Priority LOW 38
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0292 · Published 2017-02-21 · No fix listed CWE-476
Open these records in search → All records by CVSS severity
6 3 0 0 0
THREATIST.IORead the docs