Steelstore
Vendor:
First CVE: Aug 28, 2018 · Active for 7 years
6
Total CVEs
More Total CVEs than 83% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 37% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Steelstore over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 28, 2018
7 years ago
Most Recent CVE
Nov 25, 2019
2,437 days ago
CVE Severity & Scoring
Steelstore6 CVEs
67%
17%
17%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (16.7%)
Network5 (83.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (50.0%)
High3 (50.0%)
Unknown0 (0.0%)
User Interaction
None5 (83.3%)
Unknown0 (0.0%)
Required1 (16.7%)
Privileges Required
Low1 (16.7%)
High0 (0.0%)
None5 (83.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-5481CRITICAL Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. | Sep 16, 2019 | 9.8 | 35 | NO | NO |
CVE-2018-0734MEDIUM The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the privat | Oct 30, 2018 | 5.9 | 26 | NO | NO |
CVE-2019-14815HIGH A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver. | Nov 25, 2019 | 7.8 | 25 | NO | NO |
CVE-2019-7317MEDIUM png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | Feb 4, 2019 | 5.3 | 24 | NO | NO |
CVE-2018-0735MEDIUM The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the priv | Oct 29, 2018 | 5.9 | 23 | NO | NO |
CVE-2018-15919MEDIUM Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the | Aug 28, 2018 | 5.3 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Steelstore
Top CWEs
Versions
No cataloged versions.