Vulnerabilities > Linuxfoundation > Osquery > 4.1.0

DATE CVE VULNERABILITY TITLE RISK
2020-12-16 CVE-2020-26273 Command Injection vulnerability in Linuxfoundation Osquery
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework.
local
low complexity
linuxfoundation CWE-77
3.6
3.6
2020-07-10 CVE-2020-11081 Process Control vulnerability in Linuxfoundation Osquery
osquery before version 4.4.0 enables a privilege escalation vulnerability.
local
low complexity
linuxfoundation CWE-114
8.2
8.2
2020-03-13 CVE-2020-1887 Improper Certificate Validation vulnerability in Linuxfoundation Osquery
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust. 		5.8
5.8