ST
Product
Storage
On CISA KEVExploited in the wild
31
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 17Low 0
Watch
Add Storage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: 2.0 |
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 2.1 |
| CVE-2023-3961 | 9.8 | Nov 3 | A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory Affected: 3.0 |
| CVE-2022-26148 | 9.8 | Mar 21 | An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix Affected: 3.0 |
| CVE-2012-4406 | 9.8 | Oct 22 | OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote… Affected: 2.0 |
| CVE-2012-0247 | 8.8 | Jun 5 | ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in… Affected: 2.0 |
| CVE-2011-3045 | 8.8 | Mar 22 | Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote… Affected: 2.0 |
| CVE-2014-0224 | 7.4 | Jun 5 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers… Affected: 2.1 |
| CVE-2022-2447 | 6.6 | Sep 1 | A flaw was found in Keystone Affected: 3.0 |
| CVE-2023-42669 | 6.5 | Nov 6 | A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements Affected: 3.0 |
| CVE-2023-4091 | 6.5 | Nov 3 | A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured… Affected: 3.0 |
| CVE-2021-3670 | 6.5 | Aug 23 | MaxQueryDuration not honoured in Samba AD DC LDAP Affected: 3.0 |
| CVE-2020-10730 | 6.5 | Jul 7 | A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4 Affected: 3.0 |
| CVE-2019-14907 | 6.5 | Jan 21 | All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained… Affected: 3.0 |
| CVE-2012-0037 | 6.5 | Jun 17 | Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted… Affected: 2.0 |
| CVE-2012-1798 | 6.5 | Jun 5 | The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted… Affected: 2.0 |
| CVE-2012-0260 | 6.5 | Jun 5 | The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a… Affected: 2.0 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: 3.0 |
| CVE-2023-3347 | 5.9 | Jul 20 | A vulnerability was found in Samba's SMB2 packet signing mechanism Affected: 3.0 |
| CVE-2020-10685 | 5.5 | May 11 | A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and… Affected: 3.0 |
| CVE-2013-4280 | 5.5 | Nov 4 | Insecure temporary file vulnerability in RedHat vsdm 4.9.6 Affected: 2.0; 2.1 |
| CVE-2012-0248 | 5.5 | Jun 5 | ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference… Affected: 2.0 |
| CVE-2023-34968 | 5.3 | Jul 20 | A path disclosure vulnerability was found in Samba Affected: 3.0 |
| CVE-2021-44141 | 4.3 | Feb 21 | All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system… Affected: 3.0 |
| CVE-2020-14318 | 4.3 | Dec 3 | A flaw was found in the way samba handled file and directory permissions Affected: 3.0 |
| CVE-2014-3470 | – | Jun 5 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used,… Affected: 2.1 |
| CVE-2014-0221 | – | Jun 5 | The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service… Affected: 2.1 |
| CVE-2012-0876 | – | Jul 3 | The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent… Affected: 2.0 |
| CVE-2012-1938 | – | Jun 5 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a… Affected: 2.0 |
| CVE-2012-0053 | – | Jan 28 | protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows… Affected: 2.0 |
| CVE-2012-0031 | – | Jan 18 | scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other… Affected: 2.0 |
Showing 31