Known vulnerabilities in GENESIS64

Vendor: ICONICS, Inc.
Software: GENESIS64
Software CPE: cpe:2.3:a:iconics:genesis64:*:*:*:*:*:*:*:*
Website: https://iconics.com/
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GENESIS64 GENESIS64 is affected by 23 known vulnerabilities: 13 high, 5 medium, 5 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93709 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2024-1574		 CWE-470 Low
No
No
 10.97.3 03.07.2024 SB2024070319
#VU93706 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-2650		 CWE-307 High
No
No
 10.97.2 03.07.2024 SB2024070305
SB2024070313
#VU80565 - Improper input validation
CVE-2023-4807		 CWE-20 Low
No
No
 10.97.2 08.09.2023 SB2023090834
SB2023092109
SB2023110126
and 45 more
#VU70321 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-40264		 CWE-22 Medium
No
No
 10.97.2 CFR1 14.12.2022 SB2022121422
#VU65761 - Deserialization of Untrusted Data
CVE-2022-33320		 CWE-502 High
No
No
 10.97.2 25.07.2022 SB2022072541
SB2022072542
#VU65756 - Out-of-bounds read
CVE-2022-33319		 CWE-125 High
No
No
 10.97.2 25.07.2022 SB2022072541
SB2022072542
#VU65755 - Deserialization of Untrusted Data
CVE-2022-33318		 CWE-502 High
No
No
 10.97.2 25.07.2022 SB2022072541
SB2022072542
#VU65753 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-33317		 CWE-829 High
No
No
 10.97.2 25.07.2022 SB2022072541
SB2022072542
#VU65751 - Deserialization of Untrusted Data
CVE-2022-33316		 CWE-502 High
No
No
 10.97.2 25.07.2022 SB2022072541
SB2022072542
#VU65750 - Deserialization of Untrusted Data
CVE-2022-33315		 CWE-502 High
No
No
 10.97.2 25.07.2022 SB2022072541
SB2022072542
#VU65746 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29834		 CWE-22 Medium
No
No
 10.97.2 25.07.2022 SB2022072541
#VU59904 - Out-of-bounds read
CVE-2022-23130		 CWE-125 Low
No
No
 10.97.1 21.01.2022 SB2022012107
SB2022012108
#VU59903 - Unprotected Storage of Credentials
CVE-2022-23129		 CWE-256 Low
No
No
 10.97.1 21.01.2022 SB2022012107
SB2022012109
#VU59902 - Incomplete List of Disallowed Inputs
CVE-2022-23128		 CWE-184 High
No
No
 10.97.1 21.01.2022 SB2022012107
SB2022012108
#VU59901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23127		 CWE-79 Low
No
No
 10.97.1 21.01.2022 SB2022012107
SB2022012109
#VU54377 - Memory corruption
CVE-2021-27041		 CWE-119 High
No
No
 10.97.1 24.06.2021 SB2021062412
SB2021062413
SB2021062414
and 11 more
#VU54376 - Out-of-bounds read
CVE-2021-27040		 CWE-125 High
No
No
 10.97.1 24.06.2021 SB2021062412
SB2021062413
SB2021062414
and 10 more
#VU53244 - Uncontrolled Recursion
CVE-2021-27432		 CWE-674 Medium
No
No
 10.97.1 14.05.2021 SB2021051403
SB2021102206
SB2021102207
#VU29163 - Deserialization of Untrusted Data
CVE-2020-12015		 CWE-502 Medium
No
No
 10.95.2, 10.95.5, 10.96 19.06.2020 SB2020061914
SB2020061915
SB2020061916
and 2 more
#VU29162 - Out-of-bounds write
CVE-2020-12011		 CWE-787 High
No
No
 10.95.2, 10.95.5, 10.96 19.06.2020 SB2020061914
SB2020061915
SB2020061916
and 2 more


Showing elements 1 - 20 out of 23