GovCVEs & Vulnerabilities

3 CVEs affecting Gov products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

3 CVEs→ All vendors

Most Affected Products

ccd-data-store-api 1imposto de renda da pessoa fisica 2021 1protego safe 1

CVE-2021-34682LOW

Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.

The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. The ABTraceTogether (Alberta), ProteGO (Poland), and TraceTogether (Singapore) apps were also affected.

14 May 2020

6.5

CVSS

CVE-2019-15569CRITICAL

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java.

26 Aug 2019

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database