Scylladb

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-33972 Sep 27, 19:15 HIGH This Week

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Apache Scylladb

NVD GitHub

CVSS 3.1

8.8

EPSS

0.5%

CVE-2022-29240 Sep 15, 22:15 HIGH PATCH This Week

Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

Apache Information Disclosure Scylla Scylladb

NVD GitHub

CVSS 3.1

8.1

EPSS

1.0%

CVE-2023-33972

EPSS 1% CVSS 8.8

HIGH This Week

Privilege Escalation Apache Scylladb

NVD GitHub

CVE-2022-29240

EPSS 1% CVSS 8.1

HIGH PATCH This Week

Apache Information Disclosure Scylla +1

NVD GitHub