ST
Product
Storage
On CISA KEVExploited in the wild
31
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 17Low 0
Watch
Add Storage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2447 | 6.6 | Sep 1 | A flaw was found in Keystone Affected: 3.0 |
| CVE-2023-42669 | 6.5 | Nov 6 | A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements Affected: 3.0 |
| CVE-2023-4091 | 6.5 | Nov 3 | A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured… Affected: 3.0 |
| CVE-2021-3670 | 6.5 | Aug 23 | MaxQueryDuration not honoured in Samba AD DC LDAP Affected: 3.0 |
| CVE-2020-10730 | 6.5 | Jul 7 | A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4 Affected: 3.0 |
| CVE-2019-14907 | 6.5 | Jan 21 | All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained… Affected: 3.0 |
| CVE-2012-0037 | 6.5 | Jun 17 | Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted… Affected: 2.0 |
| CVE-2012-1798 | 6.5 | Jun 5 | The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted… Affected: 2.0 |
| CVE-2012-0260 | 6.5 | Jun 5 | The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a… Affected: 2.0 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: 3.0 |
| CVE-2023-3347 | 5.9 | Jul 20 | A vulnerability was found in Samba's SMB2 packet signing mechanism Affected: 3.0 |
| CVE-2020-10685 | 5.5 | May 11 | A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and… Affected: 3.0 |
| CVE-2013-4280 | 5.5 | Nov 4 | Insecure temporary file vulnerability in RedHat vsdm 4.9.6 Affected: 2.0; 2.1 |
| CVE-2012-0248 | 5.5 | Jun 5 | ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference… Affected: 2.0 |
| CVE-2023-34968 | 5.3 | Jul 20 | A path disclosure vulnerability was found in Samba Affected: 3.0 |
| CVE-2021-44141 | 4.3 | Feb 21 | All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system… Affected: 3.0 |
| CVE-2020-14318 | 4.3 | Dec 3 | A flaw was found in the way samba handled file and directory permissions Affected: 3.0 |
Showing 17