Management Services For Element Software
27 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Management Services For Element Software, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.
Management Services For Element Software CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 27 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High17
- Medium7
- Low2
Latest CVEs
The 15 most recently published vulnerabilities affecting Management Services For Element Software.
- CVE-2023-36054lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs bec...6.5
- CVE-2023-37920Certifi's removal of e-Tugra root certificate7.5
- CVE-2023-24329An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.7.5
- CVE-2022-23491Removal of TrustCor root certificate6.8
- CVE-2022-45061An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably ...7.5
- CVE-2022-37966Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability8.1
- CVE-2022-38023Netlogon RPC Elevation of Privilege Vulnerability8.1
- CVE-2022-37967Windows Kerberos Elevation of Privilege Vulnerability7.2
- CVE-2022-36033jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled6.1
- CVE-2022-37434zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected...9.8
- CVE-2022-24736A Malformed Lua script can crash Redis3.3
- CVE-2022-24735Lua scripts can be manipulated to overcome ACL rules in Redis3.9
- CVE-2018-25032zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.7.5
- CVE-2021-3737A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infin...7.5
- CVE-2022-0391A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method d...7.5
Product grouping is registry-driven, with AI assist and human review. How it works