XE
Vendor
xerial
2 products with CVEs on record
12
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116590
New
SN
snappy-java
xerial
5.9
0%
Oct 26snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
CVE-2026-108106
SN
snappy-java
xerial
7.5
0%
Oct 9Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service
CVE-2026-108104
SN
snappy-java
xerial
4.8
0%
Oct 9Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream
CVE-2026-93452
SN
snappy-java
xerial
7.5
1%
Sep 17snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress
CVE-2026-93451
SN
snappy-java
xerial
6.5
0%
Sep 17snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods
CVE-2026-90559
SN
snappy-java
xerial
7.5
1%
Sep 12snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress
CVE-2024-36124
SN
Snappy-java
Xerial
5.3
0%
Jun 3iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash
CVE-2023-43642
SN
snappy-java
xerial
7.5
1%
Sep 25Missing upper bound check on chunk length in snappy-java
CVE-2023-34455
SN
snappy-java
xerial
7.5
2%
Jun 15snappy-java's unchecked chunk length leads to DoS
CVE-2023-34454
SN
snappy-java
xerial
7.5
1%
Jun 15snappy-java's Integer Overflow vulnerability in compress leads to DoS
CVE-2023-34453
SN
snappy-java
xerial
7.5
2%
Jun 15snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
CVE-2023-32697
SQ
sqlite-jdbc
xerial
9.8
2%
May 23Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled