SO
Product
Solidfire
On CISA KEVExploited in the wild
190
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 73Medium 87Low 14
Watch
Add Solidfire to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-21305 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-21299 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21296 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21294 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21293 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21291 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-21283 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21282 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21277 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21271 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2021-42374 | 5.3 | Nov 15 | An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed Affected: All versions, or not specified |
| CVE-2021-35586 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2021-35578 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified |
| CVE-2021-35565 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified |
| CVE-2021-35564 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: All versions, or not specified |
| CVE-2021-35561 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: All versions, or not specified |
| CVE-2021-35559 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified |
| CVE-2021-35556 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified |
| CVE-2016-20012 | 5.3 | Sep 15 | OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion… Affected: All versions, or not specified |
| CVE-2021-22925 | 5.3 | Aug 5 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl Affected: All versions, or not specified |
| CVE-2021-22923 | 5.3 | Aug 5 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then… Affected: All versions, or not specified |
| CVE-2021-34429 | 5.3 | Jul 15 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: All versions, or not specified |
| CVE-2021-2163 | 5.3 | Apr 22 | Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2021-22876 | 5.3 | Apr 1 | curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header Affected: All versions, or not specified |
| CVE-2020-27223 | 5.3 | Feb 26 | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: All versions, or not specified |
| CVE-2020-14803 | 5.3 | Oct 21 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2020-12888 | 5.3 | May 15 | The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space Affected: All versions, or not specified |
| CVE-2019-18282 | 5.3 | Jan 16 | The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f Affected: All versions, or not specified |
| CVE-2018-7170 | 5.3 | Mar 6 | ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order… Affected: All versions, or not specified |
| CVE-2017-15906 | 5.3 | Oct 26 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: All versions, or not specified |
| CVE-2021-3753 | 4.7 | Feb 16 | A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not… Affected: All versions, or not specified |
| CVE-2019-19965 | 4.7 | Dec 25 | In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related… Affected: All versions, or not specified |
| CVE-2019-3901 | 4.7 | Apr 22 | A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs Affected: All versions, or not specified |
| CVE-2020-10732 | 4.4 | Jun 12 | A flaw was found in the Linux kernel's implementation of Userspace core dumps Affected: All versions, or not specified |
| CVE-2019-19318 | 4.4 | Nov 28 | In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in… Affected: All versions, or not specified |
| CVE-2022-32205 | 4.3 | Jul 7 | A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them Affected: All versions, or not specified |
| CVE-2020-14792 | 4.2 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |