https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-32268.htmlhttps://patchthecve.com/cve/CVE-2022-32268.htmlWed, 17 Jun 2026 04:47:01 +0000HIGH 8.8: StarWind SAN and NAS v0.2 build 1914 allow remote code execution. A flaw was found in REST API in StarWind Stack. REST command, which allows changing the hostname, doesn’t check a new hostname parameter. It goes directly to bash as part of a script. An attacker with non-root user access can inject ahttps://patchthecve.com/cve/CVE-2022-24552.htmlhttps://patchthecve.com/cve/CVE-2022-24552.htmlWed, 17 Jun 2026 04:32:06 +0000CRITICAL 9.8: A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input parameters. Some of them go directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root phttps://patchthecve.com/cve/CVE-2022-24551.htmlhttps://patchthecve.com/cve/CVE-2022-24551.htmlWed, 17 Jun 2026 04:32:06 +0000HIGH 8.8: A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWind SAN and NAS v0.2 build 1633.https://patchthecve.com/cve/CVE-2013-20004.htmlhttps://patchthecve.com/cve/CVE-2013-20004.htmlTue, 16 Jun 2026 23:52:33 +0000CRITICAL 9.8: A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN (Windows Native) Versionhttps://patchthecve.com/cve/CVE-2007-20001.htmlhttps://patchthecve.com/cve/CVE-2007-20001.htmlTue, 16 Jun 2026 22:38:43 +0000HIGH 7.5: A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20.https://patchthecve.com/cve/CVE-2022-23858.htmlhttps://patchthecve.com/cve/CVE-2022-23858.htmlWed, 17 Jun 2026 04:30:53 +0000HIGH 8.8: A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.https://patchthecve.com/cve/CVE-2021-42574.htmlhttps://patchthecve.com/cve/CVE-2021-42574.htmlWed, 17 Jun 2026 04:09:50 +0000HIGH 8.3: An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and inhttps://patchthecve.com/cve/CVE-2021-42739.htmlhttps://patchthecve.com/cve/CVE-2021-42739.htmlWed, 17 Jun 2026 04:10:03 +0000MEDIUM 6.7: The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.https://patchthecve.com/cve/CVE-2021-37750.htmlhttps://patchthecve.com/cve/CVE-2021-37750.htmlWed, 14 Oct 2026 12:17:15 +0000MEDIUM 6.5: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.https://patchthecve.com/cve/CVE-2020-36322.htmlhttps://patchthecve.com/cve/CVE-2020-36322.htmlWed, 17 Jun 2026 03:15:18 +0000MEDIUM 5.5: An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness ishttps://patchthecve.com/cve/CVE-2021-20271.htmlhttps://patchthecve.com/cve/CVE-2021-20271.htmlWed, 17 Jun 2026 03:33:34 +0000HIGH 7.0: A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this https://patchthecve.com/cve/CVE-2020-14409.htmlhttps://patchthecve.com/cve/CVE-2020-14409.htmlWed, 17 Jun 2026 02:54:43 +0000HIGH 7.8: SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.https://patchthecve.com/cve/CVE-2020-25704.htmlhttps://patchthecve.com/cve/CVE-2020-25704.htmlWed, 17 Jun 2026 03:07:09 +0000MEDIUM 5.5: A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.https://patchthecve.com/cve/CVE-2020-25656.htmlhttps://patchthecve.com/cve/CVE-2020-25656.htmlWed, 17 Jun 2026 03:07:04 +0000MEDIUM 4.1: A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.https://patchthecve.com/cve/CVE-2020-25643.htmlhttps://patchthecve.com/cve/CVE-2020-25643.htmlWed, 17 Jun 2026 03:07:02 +0000HIGH 7.2: A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerabhttps://patchthecve.com/cve/CVE-2020-0427.htmlhttps://patchthecve.com/cve/CVE-2020-0427.htmlWed, 17 Jun 2026 02:45:49 +0000MEDIUM 5.5: In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171https://patchthecve.com/cve/CVE-2020-14314.htmlhttps://patchthecve.com/cve/CVE-2020-14314.htmlWed, 17 Jun 2026 02:54:31 +0000MEDIUM 5.5: A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system avhttps://patchthecve.com/cve/CVE-2020-24394.htmlhttps://patchthecve.com/cve/CVE-2020-24394.htmlWed, 17 Jun 2026 03:05:29 +0000HIGH 7.1: In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.https://patchthecve.com/cve/CVE-2019-20807.htmlhttps://patchthecve.com/cve/CVE-2019-20807.htmlWed, 17 Jun 2026 02:31:13 +0000MEDIUM 5.3: In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).