ST
Vendor
Starwindsoftware
40
CVEs
2
On KEV
0
New 30D
Products
SV9.8
Starwind Virtual San
Starwindsoftware
23 CVEs1 on KEV0 new
CC8.8
Command Center
Starwindsoftware
4 CVEs1 on KEV0 new
SS9.8
Starwind San & Nas
Starwindsoftware
5 CVEs0 on KEV0 new
IS9.8
Iscsi San
Starwindsoftware
2 CVEs0 on KEV0 new
NA9.8
Nas
Starwindsoftware
2 CVEs0 on KEV0 new
SA9.8
San
Starwindsoftware
2 CVEs0 on KEV0 new
SN5.3
San & Nas
Starwindsoftware
1 CVEs0 on KEV0 new
SH5.5
Starwind Hyperconverged Appliance
Starwindsoftware
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-32268 | SS Starwind San & Nas Starwindsoftware | 8.8 | Jun 3 | StarWind SAN and NAS v0.2 build 1914 allow remote code execution |
| CVE-2022-24552 | NA Nas Starwindsoftware | 9.8 | Feb 6 | A flaw was found in the REST API in StarWind Stack |
| CVE-2022-24551 | NA Nas Starwindsoftware | 8.8 | Feb 6 | A flaw was found in StarWind Stack |
| CVE-2013-20004 | IS Iscsi San Starwindsoftware | 9.8 | Feb 6 | A flaw was found in StarWind iSCSI target |
| CVE-2007-20001 | IS Iscsi San Starwindsoftware | 7.5 | Feb 6 | A flaw was found in StarWind iSCSI target |
| CVE-2021-4034 RansomwareIn wildKEV | SV Starwind Virtual San Starwindsoftware | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability |
| CVE-2022-23858 | CC Command Center Starwindsoftware | 8.8 | Jan 24 | A flaw was found in the REST API |
| CVE-2021-43527 | SV Starwind Virtual San Starwindsoftware | 9.8 | Dec 8 | NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures |
| CVE-2021-42574 | SV Starwind Virtual San Starwindsoftware | 8.3 | Nov 1 | An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0 |
| CVE-2021-42739 | SV Starwind Virtual San Starwindsoftware | 6.7 | Oct 20 | The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because… |
| CVE-2021-41617 | SV Starwind Virtual San Starwindsoftware | 7.0 | Sep 26 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as… |
| CVE-2021-37750 | SV Starwind Virtual San Starwindsoftware | 6.5 | Aug 23 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that… |
| CVE-2020-36385 | SV Starwind Virtual San Starwindsoftware | 7.8 | Jun 7 | An issue was discovered in the Linux kernel before 5.10 |
| CVE-2020-36322 | SV Starwind Virtual San Starwindsoftware | 5.5 | Apr 14 | An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf |
| CVE-2021-20271 | SV Starwind Virtual San Starwindsoftware | 7.0 | Mar 26 | A flaw was found in RPM's signature check functionality when reading a package file |
| CVE-2020-14409 | SV Starwind Virtual San Starwindsoftware | 7.8 | Jan 19 | SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file |
| CVE-2020-25704 | CC Command Center Starwindsoftware | 5.5 | Dec 2 | A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER |
| CVE-2020-25656 | SV Starwind Virtual San Starwindsoftware | 4.1 | Dec 2 | A flaw was found in the Linux kernel |
| CVE-2020-25643 | SV Starwind Virtual San Starwindsoftware | 7.2 | Oct 6 | A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7 |
| CVE-2020-0427 | SV Starwind Virtual San Starwindsoftware | 5.5 | Sep 17 | In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free |
| CVE-2020-14314 | SV Starwind Virtual San Starwindsoftware | 5.5 | Sep 15 | A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing |
| CVE-2020-24394 | SV Starwind Virtual San Starwindsoftware | 7.1 | Aug 19 | In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka… |
| CVE-2019-20807 | SN San & Nas Starwindsoftware | 5.3 | May 28 | In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua) |
| CVE-2018-18585 | SV Starwind Virtual San Starwindsoftware | 4.3 | Oct 23 | chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name) |
| CVE-2018-18584 | SV Starwind Virtual San Starwindsoftware | 6.5 | Oct 23 | In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds… |
| CVE-2018-16758 | SV Starwind Virtual San Starwindsoftware | 5.9 | Oct 10 | Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets |
| CVE-2018-16738 | SV Starwind Virtual San Starwindsoftware | 3.7 | Oct 10 | tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation |
| CVE-2018-16737 | SV Starwind Virtual San Starwindsoftware | 5.3 | Oct 10 | tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation |
| CVE-2018-3839 | SV Starwind Virtual San Starwindsoftware | 8.8 | Apr 10 | An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2 |
| CVE-2018-3837 | SV Starwind Virtual San Starwindsoftware | 5.5 | Apr 10 | An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2 |