Command Center (Starwindsoftware) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2022-01-28. Vendor: Starwindsoftware.

CVEs of Command Center

• CVE-2021-4034 - CVSS 7.8 (high), 2022-01-28: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users…
• CVE-2022-23858 - CVSS 8.8 (high), 2022-01-24: A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects…
• CVE-2020-25704 - CVSS 5.5 (medium), 2020-12-02: A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this…
• CVE-2019-20807 - CVSS 5.3 (medium), 2020-05-28: In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).