Stormshield Management Center (Stormshield) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2023-02-08. Vendor: Stormshield.
CVEs of Stormshield Management Center
- CVE-2023-0216 - CVSS 7.5 (high), 2023-02-08: An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or…
- CVE-2023-0215 - CVSS 7.5 (high), 2023-02-08: The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the…
- CVE-2023-0401 - CVSS 7.5 (high), 2023-02-08: A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the…
- CVE-2023-0286 - CVSS 7.4 (high), 2023-02-08: There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but…
- CVE-2022-32213 - CVSS 6.5 (medium), 2022-07-14: The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead…
- CVE-2022-32215 - CVSS 6.5 (medium), 2022-07-14: The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can…
- CVE-2022-32214 - CVSS 6.5 (medium), 2022-07-14: The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can…
- CVE-2002-20001 - CVSS 7.5 (high), 2021-11-11: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and…
