İçeriğe atla
Noroxi

starwindsoftware kayıtları

starwindsoftware üreticisine ait 30 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %3,3
Silahlaştırılmış
1 · %3,3
Pre-auth RCE
2
Düzeltme kaydı olan
%80
Yayından KEV’e ortanca
150 gün

Yıllara göre kayıt

  1. 18
  2. 20
  3. 21
  4. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

30 kayıt
  • CVE-2021-4034
    89Hemen

    A local privilege escalation vulnerability was found on polkit's pkexec utility.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %94

    polkit project · polkit28 Oca 2022

  • CVE-2021-43527
    44Planlayın

    NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-

    KritikCVSS 9,8İstismar yokEPSS %18

    mozilla · nss8 Ara 2021

  • CVE-2022-24552
    39İzleyin

    A flaw was found in the REST API in StarWind Stack.

    KritikCVSS 9,8İstismar yokEPSS %1

    starwindsoftware · nas6 Şub 2022

  • CVE-2013-20004
    39İzleyin

    A flaw was found in StarWind iSCSI target.

    KritikCVSS 9,8İstismar yokEPSS %1

    starwindsoftware · iscsi san6 Şub 2022

  • CVE-2021-42574
    37İzleyin

    An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0.

    YüksekCVSS 8,3Kavram kanıtıEPSS %13

    unicode · unicode1 Kas 2021

  • CVE-2018-3839
    36İzleyin

    An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2.

    YüksekCVSS 8,8İstismar yokEPSS %3

    libsdl · sdl image10 Nis 2018

  • CVE-2022-32268
    36İzleyin

    StarWind SAN and NAS v0.2 build 1914 allow remote code execution.

    YüksekCVSS 8,8İstismar yokEPSS %2

    starwindsoftware · starwind san \& nas3 Haz 2022

  • CVE-2022-23858
    35İzleyin

    A flaw was found in the REST API.

    YüksekCVSS 8,8İstismar yokEPSS %1

    starwindsoftware · command center23 Oca 2022

  • CVE-2022-24551
    35İzleyin

    A flaw was found in StarWind Stack.

    YüksekCVSS 8,8İstismar yokEPSS %1

    starwindsoftware · nas6 Şub 2022

  • CVE-2020-36385
    31İzleyin

    An issue was discovered in the Linux kernel before 5.10.

    YüksekCVSS 7,8İstismar yokEPSS %1

    linux · linux kernel7 Haz 2021

  • CVE-2020-14409
    31İzleyin

    SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SD

    YüksekCVSS 7,8İstismar yokEPSS %1

    libsdl · simple directmedia layer19 Oca 2021

  • CVE-2007-20001
    30İzleyin

    A flaw was found in StarWind iSCSI target.

    YüksekCVSS 7,5İstismar yokEPSS %1

    starwindsoftware · iscsi san6 Şub 2022

  • CVE-2020-25643
    29İzleyin

    A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7.

    YüksekCVSS 7,2İstismar yokEPSS %3

    linux · linux kernel6 Eki 2020

  • CVE-2021-41617
    29İzleyin

    sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplement

    YüksekCVSS 7,0Kavram kanıtıEPSS %3

    openbsd · openssh26 Eyl 2021

  • CVE-2021-20271
    28İzleyin

    A flaw was found in RPM's signature check functionality when reading a package file.

    YüksekCVSS 7,0İstismar yokEPSS %1

    rpm · rpm26 Mar 2021

  • CVE-2020-24394
    28İzleyin

    In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesys

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux kernel19 Ağu 2020

  • CVE-2018-18584
    27İzleyin

    In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Qua

    OrtaCVSS 6,5İstismar yokEPSS %3

    cabextract project · cabextract22 Eki 2018

  • CVE-2021-37750
    27İzleyin

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/

    OrtaCVSS 6,5İstismar yokEPSS %2

    mit · kerberos 523 Ağu 2021

  • CVE-2021-42739
    26İzleyin

    The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers

    OrtaCVSS 6,7İstismar yokEPSS %0

    linux · linux kernel20 Eki 2021

  • CVE-2018-16758
    23İzleyin

    Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the

    OrtaCVSS 5,9İstismar yokEPSS %1

    tinc-vpn · tinc10 Eki 2018

  • CVE-2018-3837
    22İzleyin

    An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2

    OrtaCVSS 5,5İstismar yokEPSS %1

    libsdl · sdl image10 Nis 2018

  • CVE-2020-0427
    22İzleyin

    In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free.

    OrtaCVSS 5,5İstismar yokEPSS %0

    google · android17 Eyl 2020

  • CVE-2020-36322
    22İzleyin

    An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf.

    OrtaCVSS 5,5İstismar yokEPSS %0

    linux · linux kernel14 Nis 2021

  • CVE-2020-14314
    22İzleyin

    A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a direc

    OrtaCVSS 5,5İstismar yokEPSS %0

    linux · linux kernel15 Eyl 2020

  • CVE-2020-25704
    22İzleyin

    A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER.

    OrtaCVSS 5,5İstismar yokEPSS %0

    linux · linux kernel1 Ara 2020