Export limit exceeded: 413280 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (70 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-27812 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 7.5 High |
| Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS. | ||||
| CVE-2022-23989 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 7.5 High |
| In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, making the firewall unreachable. An attacker could exploit this via forged and properly timed traffic to cause a denial of service. | ||||
| CVE-2022-22703 | 2 Microsoft, Stormshield | 2 Windows, Network Security | 2024-11-21 | 5.5 Medium |
| In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer. | ||||
| CVE-2021-45885 | 1 Stormshield | 1 Network Security | 2024-11-21 | 7.5 High |
| An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password. | ||||
| CVE-2021-45091 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 4.3 Medium |
| Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control. | ||||
| CVE-2021-45090 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 9.8 Critical |
| Stormshield Endpoint Security before 2.1.2 allows remote code execution. | ||||
| CVE-2021-45089 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 5.2 Medium |
| Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control. | ||||
| CVE-2021-3398 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 5.8 Medium |
| Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. | ||||
| CVE-2021-3384 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 5.3 Medium |
| A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to contact new hosts via IPv4 or IPv6. This affects versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to 3.11.4, and 4.0.0 to 4.1.5. Fixed in versions 2.7.8, 3.7.17, 3.11.5, and 4.2.0. | ||||
| CVE-2021-37613 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 6.5 Medium |
| Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. | ||||
| CVE-2021-35957 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 6.7 Medium |
| Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in %WINDIR%\system32) with malicious ones. | ||||
| CVE-2021-31814 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 6.1 Medium |
| In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client. | ||||
| CVE-2021-31617 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 9.8 Critical |
| In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution. | ||||
| CVE-2021-31225 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 7.3 High |
| SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed. | ||||
| CVE-2021-31224 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 3.5 Low |
| SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies. | ||||
| CVE-2021-31223 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 5.7 Medium |
| SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed. | ||||
| CVE-2021-31222 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 5.7 Medium |
| SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. | ||||
| CVE-2021-31221 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 5.7 Medium |
| SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed. | ||||
| CVE-2021-31220 | 1 Stormshield | 1 Endpoint Security | 2024-11-21 | 5.2 Medium |
| SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies. | ||||
| CVE-2021-28962 | 1 Stormshield | 1 Stormshield Network Security | 2024-11-21 | 7.2 High |
| Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands. | ||||