[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fovzOYcPQT_ajgt9RK1gBwN2cueyLHrPON66pU5ZklXM":3,"g5a-family:starwindsoftware\u002Fstarwind_virtual_san":121,"g5a-ex:starwindsoftware\u002Fstarwind_virtual_san@*":122},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":93,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"starwindsoftware","starwind_virtual_san",4,23,1,"2022-01-28",[14,18,20,23],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"8",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"v18r13",{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},"v8",15,{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},"v8r13",5,"Starwind Virtual San by Starwindsoftware is a technology product with 4 tracked versions and 23 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},[33,40,47,53,59,66,71,77,83,88],{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":4,"epssScore":39},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.",7.8,"v3.1","High",0.94921,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":37,"severity":45,"isKev":17,"epssScore":46},"CVE-2021-43527","NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S\u002FMIME, PKCS \\#7, or PKCS \\#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS \u003C 3.73 and NSS \u003C 3.68.1.","2021-12-08",9.8,"Critical",0.17563,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":52},"CVE-2021-42574","An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler\u002Finterpreter\u002Fetc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm.","2021-11-01",8.3,0.12881,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":58},"CVE-2020-25643","A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2020-10-06",7.2,0.03292,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":37,"severity":64,"isKev":17,"epssScore":65},"CVE-2018-18584","In mspack\u002Fcab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.","2018-10-23",6.5,"Medium",0.03086,{"cveId":67,"description":68,"publishedDate":62,"cvssScore":69,"cvssVersion":37,"severity":64,"isKev":17,"epssScore":70},"CVE-2018-18585","chmd_read_headers in mspack\u002Fchmd.c in libmspack before 0.8alpha accepts a filename that has '\\0' as its first or second character (such as the \"\u002F\\0\" name).",4.3,0.03085,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":76},"CVE-2018-3839","An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.","2018-04-10",8.8,0.02624,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":82},"CVE-2021-41617","sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.","2021-09-26",7,0.02545,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":63,"cvssVersion":37,"severity":64,"isKev":17,"epssScore":87},"CVE-2021-37750","The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc\u002Fdo_tgs_req.c via a FAST inner body that lacks a server field.","2021-08-23",0.02505,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":92},"CVE-2020-36385","An issue was discovered in the Linux kernel before 5.10. drivers\u002Finfiniband\u002Fcore\u002Fucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.","2021-06-07",0.01476,[94],{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"severity":38,"isKev":4,"epssScore":39,"cisaVulnName":95,"cisaDateAdded":96,"cisaShortDescription":97,"cisaRequiredAction":98},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Starwind Virtual San by Starwindsoftware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Starwind Virtual San by Starwindsoftware covering 4 versions with 23 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Starwind Virtual San vulnerabilities, Starwind Virtual San security, Starwind Virtual San CVE, Starwindsoftware Starwind Virtual San, Starwind Virtual San threat intelligence, Starwindsoftware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Starwind Virtual San KEV, Starwind Virtual San exploited vulnerabilities",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Starwind Virtual San","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fstarwindsoftware\u002Fstarwind_virtual_san",{"@type":109,"name":110,"url":111},"Organization","Starwindsoftware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fstarwindsoftware","Security Software","4 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Starwind Virtual San Security Vulnerabilities","Security vulnerabilities affecting Starwind Virtual San by Starwindsoftware",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-18T20:15:51.086Z","3.0",[],{"rows":123,"total":11,"capped":17,"failed":16},[124],{"cveId":34,"name":95,"severity":38,"cvss":36,"added":96,"epss":39,"published":125,"ranges":126,"checked":4,"hits":128,"covers":17},"2022-01-28T20:15:12.193",[127],"v8-build14338",[]]