PatchTheCVEderbynet vulnerabilities and fixes
Recent CVEs affecting derbynet, with upgrade or downgrade steps. 11 tracked.
derbynet has 11 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 10. Most recent: 2024-04-18. Highest priority: CVE-2024-31818 (score 64/100).
- CVE-2024-31818 CRITICAL 9.8 DOWNGRADE Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the
- CVE-2024-30929 HIGH 8.0 UPGRADE Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via t
- CVE-2024-30928 HIGH 8.1 UPGRADE SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via
- CVE-2024-30927 MEDIUM 6.3 UPGRADE Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via t
- CVE-2024-30926 MEDIUM 4.6 UPGRADE Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via t
- CVE-2024-30925 MEDIUM 6.5 UPGRADE Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via t
- CVE-2024-30924 MEDIUM 4.6 UPGRADE Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via t
- CVE-2024-30923 CRITICAL 9.8 UPGRADE SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via
- CVE-2024-30922 CRITICAL 9.8 UPGRADE SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where
- CVE-2024-30921 MEDIUM 5.4 UPGRADE Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary co
- CVE-2024-30920 HIGH 7.4 UPGRADE Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary co
FAQ
How do I fix derbynet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is derbynet being exploited right now?
None of the tracked derbynet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which derbynet CVE should I patch first?
CVE-2024-31818 currently ranks highest (64/100): Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the.