Vendors / Gov Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Gov records in CISA KEV No Gov vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01371 · Published 2019-08-26 · No fix listed CWE-89
Priority LOW 32
The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is to…
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01393 · Published 2020-05-14 · No fix listed
Priority LOW 19
Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.00663 · Published 2021-06-12 · No fix listed
Open these records in search → All records by CVSS severity
1 0 1 1 0
