SA
Product
Storage Automation Store
113
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 24Medium 70Low 4
Watch
Add Storage Automation Store to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-9641 | 9.8 | Mar 8 | An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3 Affected: All versions, or not specified |
| CVE-2019-0192 | 9.8 | Mar 7 | In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request Affected: All versions, or not specified |
| CVE-2019-9020 | 9.8 | Feb 22 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1 Affected: All versions, or not specified |
| CVE-2019-9025 | 9.8 | Feb 22 | An issue was discovered in PHP 7.3.x before 7.3.1 Affected: All versions, or not specified |
| CVE-2019-9023 | 9.8 | Feb 22 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1 Affected: All versions, or not specified |
| CVE-2019-9021 | 9.8 | Feb 22 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1 Affected: All versions, or not specified |
| CVE-2017-9120 | 9.8 | Aug 2 | PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string… Affected: All versions, or not specified |
| CVE-2018-12882 | 9.8 | Jun 26 | exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not… Affected: All versions, or not specified |
| CVE-2018-8014 | 9.8 | May 16 | The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable… Affected: All versions, or not specified |
| CVE-2017-9119 | 9.8 | May 21 | The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have… Affected: All versions, or not specified |
| CVE-2017-5645 | 9.8 | Apr 17 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary… Affected: All versions, or not specified |
| CVE-2019-11035 | 9.1 | Apr 18 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in… Affected: All versions, or not specified |
| CVE-2019-11034 | 9.1 | Apr 18 | When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in… Affected: All versions, or not specified |
| CVE-2018-10933 | 9.1 | Oct 17 | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4 Affected: All versions, or not specified |
| CVE-2017-9788 | 9.1 | Jul 13 | In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between… Affected: All versions, or not specified |
Showing 15
