Yottadb
17 CVEs tracked since 2022. Since Apr 2022, none of them reached CISA KEV.
Yottadb CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-04 | 17 | 0 |
| 2022-05 | 3 or fewer | |
| 2022-06 | 3 or fewer | |
| 2022-07 | 3 or fewer | |
| 2022-08 | 3 or fewer | |
| 2022-09 | 3 or fewer | |
| 2022-10 | 2 or fewer | |
| 2022-11 | 3 or fewer | |
| 2022-12 | 3 or fewer | |
| 2023-01 | 3 or fewer | |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 3 or fewer | |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Yottadb's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Yottadb.
- CVE-2021-44506An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump ...7.5
- CVE-2021-44505An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.7.5
- CVE-2021-44495An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.7.5
- CVE-2021-44494An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.7.5
- CVE-2021-44493An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the siz...7.5
- CVE-2021-44492An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in ...7.5
- CVE-2021-44491An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an ...7.5
- CVE-2021-44490An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an ...7.5
- CVE-2021-44489An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order ...7.5
- CVE-2021-44488An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to...9.1
- CVE-2021-44487An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL p...7.5
- CVE-2021-44486An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain ...9.8
- CVE-2021-44485An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.7.5
- CVE-2021-44484An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL p...7.5
- CVE-2021-44483An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide ...7.5
The record
- Peak rank
- #40 in Apr 2022
- Busiest month shown
- Apr 2022, 17 CVEs
- Months with a KEV entry
- 0 since Apr 2022
- Monthly snapshots
- 1 since 2022