AA
Product
Aura Application Enablement Services
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add Aura Application Enablement Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5285 | 7.5 | Nov 15 | A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which… Affected: 6.1 through 6.3.3; 7.0 |
| CVE-2009-3939 | 7.1 | Nov 16 | The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the… Affected: 5.2; 5.2.1 |
| CVE-2022-2975 | 6.7 | Oct 6 | Avaya Aura Application Enablement Services weak permissions in web application Affected: 8.0.0.0 before 8.1.3.5; 10.1.0.0 before 10.1.0.2 |
| CVE-2006-1058 | 5.5 | Apr 4 | BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow… Affected: 4.01; 4.1 |
Showing 4
