Starwindsoftware

Records30All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Starwindsoftware records in CISA KEV

TI-2021-02923 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CRITICAL 93KEV 2022-06-27

Components

Products in the NVD configurations · select one to filter the records

Starwind Virtual San 23 records CRITICAL Starwind San & Nas 5 records MEDIUM Command Center 4 records CRITICAL Iscsi San 2 records MEDIUM Nas 2 records MEDIUM San 2 records MEDIUM San & Nas 1 record LOW Starwind Hyperconverged Appliance 1 record LOW

Records

5 records in Starwind San & Nas · all components

TI-2021-19417 CVE-2021-43527 · GHSA-7hfm-39v6-v3p5

Out-of-bounds write in Mozilla NSS

MEDIUM 59

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17563 Published 2021-12-08 Fixed in 3.73, 3.68.1 CWE-787

TI-2022-13975 CVE-2022-32268 · GHSA-cgq8-x9fm-m5vm

StarWind SAN and NAS v0.2 build 1914 allow remote code execution.

MEDIUM 43

StarWind SAN and NAS v0.2 build 1914 allow remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02402 Published 2022-06-03 No fix listed

TI-2020-18640 CVE-2020-36385 · GHSA-hpxg-r4xf-hphw

An issue was discovered in the Linux kernel before 5.10.

LOW 37

An issue was discovered in the Linux kernel before 5.10.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01476 Published 2021-06-07 Partial fix CWE-416

TI-2021-18948 CVE-2021-42739 · GHSA-f3hh-px86-x7cx

The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related…

LOW 30

The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00473 Published 2021-10-20 Partial fix CWE-787

TI-2020-15720 CVE-2020-25704 · GHSA-wpcp-36gf-6gxq

Memory leak in kernel

LOW 25

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00353 Published 2020-12-02 Partial fix CWE-401

Open these records in search →