MS
Product
Management Services For Element Software
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 18Medium 7Low 0
Watch
Add Management Services For Element Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-37920 | 9.8 | Jul 25 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts Affected: All versions, or not specified |
| CVE-2022-37434 | 9.8 | Aug 5 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field Affected: All versions, or not specified |
| CVE-2021-32762 | 8.8 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2021-32626 | 8.8 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2022-38023 | 8.1 | Nov 9 | Netlogon RPC Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-37966 | 8.1 | Nov 9 | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-24735 | 7.8 | Apr 27 | Redis is an in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2021-22118 | 7.8 | May 27 | In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary… Affected: All versions, or not specified |
| CVE-2023-24329 | 7.5 | Feb 17 | An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters Affected: All versions, or not specified |
| CVE-2022-23491 | 7.5 | Dec 7 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts Affected: All versions, or not specified |
| CVE-2022-45061 | 7.5 | Nov 9 | An issue was discovered in Python before 3.11.1 Affected: All versions, or not specified |
| CVE-2018-25032 | 7.5 | Mar 25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches Affected: All versions, or not specified |
| CVE-2021-3737 | 7.5 | Mar 4 | A flaw was found in python Affected: All versions, or not specified |
| CVE-2022-0391 | 7.5 | Feb 9 | A flaw was found in Python, specifically within the urllib.parse module Affected: All versions, or not specified |
| CVE-2021-42340 | 7.5 | Oct 14 | The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak Affected: All versions, or not specified |
| CVE-2021-32687 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2021-32675 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2021-32628 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2021-32627 | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2022-37967 | 7.2 | Nov 9 | Windows Kerberos Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-36054 | 6.5 | Aug 7 | lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer Affected: All versions, or not specified |
| CVE-2021-3671 | 6.5 | Oct 12 | A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request) Affected: All versions, or not specified |
| CVE-2022-36033 | 6.1 | Aug 29 | jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety Affected: All versions, or not specified |
| CVE-2022-24736 | 5.5 | Apr 27 | Redis is an in-memory database that persists on disk Affected: All versions, or not specified |
| CVE-2021-28169 | 5.3 | Jun 9 | For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the… Affected: All versions, or not specified |
| CVE-2020-27223 | 5.3 | Feb 26 | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: All versions, or not specified |
| CVE-2021-32672 | 4.3 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: All versions, or not specified |
Showing 27
