cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-36265,https://securityvulnerability.io/vulnerability/CVE-2024-36265,Apache Submarine Server Core: authorization bypass,"An incorrect authorization vulnerability has been identified in Apache Submarine Server Core, affecting version 0.8.0 and later. As this project has been retired, no further support or patches will be provided to address this issue. Users operating this product are strongly advised to seek alternative solutions or implement stringent access restrictions to safeguard their instances. The lack of ongoing support emphasizes the importance of migrating to a maintained product to ensure continued protection against security threats.",Apache,Apache Submarine Server Core,9.8,CRITICAL,0.04235000163316727,false,false,false,false,,false,false,2024-06-12T15:15:00.000Z,0
CVE-2024-36263,https://securityvulnerability.io/vulnerability/CVE-2024-36263,Apache Submarine Server Core: SQL injection,"** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core.

This issue affects Apache Submarine Server Core: all versions.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

",Apache,Apache Submarine Server Core,,,0.00044999999227002263,false,false,false,false,,false,false,2024-06-12T14:15:00.000Z,0