SM
Product
Stormshield Management Center
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add Stormshield Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0401 | 7.5 | Feb 8 | A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data Affected: before 3.3.3 |
| CVE-2023-0216 | 7.5 | Feb 8 | An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions Affected: before 3.3.3 |
| CVE-2023-0215 | 7.5 | Feb 8 | Use-after-free following BIO_new_NDEF Affected: before 3.3.3 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: before 3.3.3 |
| CVE-2023-0286 | 7.4 | Feb 8 | X.400 address type confusion in X.509 GeneralName Affected: before 3.3.3 |
| CVE-2022-32215 | 6.5 | Jul 14 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers Affected: before 3.3.2 |
| CVE-2022-32214 | 6.5 | Jul 14 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests Affected: before 3.3.0 |
| CVE-2022-32213 | 6.5 | Jul 14 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request… Affected: before 3.3.2 |
Showing 8