Project-harbor
18 CVEs tracked since 2022. Since Dec 2022, none of them reached CISA KEV.
Project-harbor CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-12 | 4 | 0 |
| 2023-01 | 3 or fewer | |
| 2023-02 | 5 | 0 |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 4 | 0 |
| 2023-08 | 4 or fewer | |
| 2023-09 | 5 | 0 |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 11 or fewer | |
| 2026-11 | 3 or fewer |
Products
The products that kept showing up in Project-harbor's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Project-harbor.
- CVE-2023-7104SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow5.5
- CVE-2023-5678Excessive time spent in DH check / generation with large Q parameter value5.3
- CVE-2023-38545This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of ...9.8
- CVE-2023-45853MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supporte...9.8
- CVE-2023-5156Glibc: dos due to memory leak in getaddrinfo.c7.5
- CVE-2023-4806Glibc: potential use-after-free in getaddrinfo()5.9
- CVE-2023-38039When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large hea...7.5
- CVE-2023-4813Glibc: potential use-after-free in gaih_inet()5.9
- CVE-2023-4807POLY1305 MAC implementation corrupts XMM registers on Windows7.8
- CVE-2023-40217An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authen...5.3
- CVE-2023-3817Excessive time spent checking DH q parameter value5.3
- CVE-2023-3446Excessive time spent checking DH keys and parameters5.3
- CVE-2021-33294In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.5.5
- CVE-2023-2975AES-SIV implementation ignores empty associated data entries5.3
- CVE-2023-0767An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 1...8.8
The record
- Peak rank
- #133 in Sep 2023
- Busiest month shown
- Feb 2023, 5 CVEs
- Months with a KEV entry
- 0 since Dec 2022
- Monthly snapshots
- 4 since 2022