Vendors / Starwindsoftware Records 30 All Threatist records
Exploited (KEV) 1 In CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 13 CVSS 7.0–8.9
Exploited now Starwindsoftware records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 93KEV
A local privilege escalation vulnerability was found on polkit's pkexec utility.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.94921 · Published 2022-01-28 · Fixed CWE-787
Priority MEDIUM 40
A flaw was found in the REST API.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01121 · Published 2022-01-24 · No fix listed
Priority LOW 25
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2020-12-02 · Partial fix CWE-401
Priority LOW 25
In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
CVSS 3.1 MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00488 · Published 2020-05-28 · Partial fix CWE-78
Open these records in search → All records by CVSS severity
Critical3 High13 Medium13 Low1 No CVSS0