active iq performance analytics services vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

A sensitive data disclosure flaw was found in the way Logstash versions prior to 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.

Elastic Logstash Netapp Active Iq Performance Analytics Services -

4.3

CVSSv2

Grafana prior to 5.2.0-beta1 has XSS vulnerabilities in dashboard links.

Grafana Grafana Netapp Storagegrid Webscale Nas Bridge -Netapp Active Iq Performance Analytics Services -

2.1

CVSSv2

The mincore() implementation in mm/mincore.c in the Linux kernel up to and including 4.19.13 allowed local malicious users to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the ou...

Linux Linux Kernel Netapp Element Software Management Node -Netapp Active Iq Performance Analytics Services -

1 Github repository1 Article

2.1

CVSSv2

An issue exists in the Linux kernel prior to 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.

Linux Linux Kernel Opensuse Leap 15.0 Opensuse Leap 15.1 Netapp Active Iq Performance Analytics Services -Netapp Active Iq Unified Manager Netapp Data Availability Services -Netapp Element Software -

2.1

CVSSv2

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel up to and including 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the ke...

Linux Linux Kernel Debian Debian Linux 8.0 Netapp Element Software Management Node -Netapp Active Iq Performance Analytics Services -

4.9

CVSSv2

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel up to and including 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

Linux Linux Kernel Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Opensuse Leap 15.0 Canonical Ubuntu Linux 19.04 Netapp Element Software -Netapp Active Iq Performance Analytics Services -Canonical Ubuntu Linux 14.04 Opensuse Leap 15.1 Netapp Active Iq Unified Manager Netapp Data Availability Services -Debian Debian Linux 8.0

1.9

CVSSv2

It exists systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service file), a local attacker who is able to write to the PIDFile of the mentioned service may ...

Systemd Project Systemd Redhat Enterprise Linux 7.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 16.04 Netapp Element Software -Netapp Active Iq Performance Analytics Services -

1 Github repository

4.7

CVSSv2

A backporting error exists in the Linux stable/longterm kernel 4.4.x up to and including 4.4.190, 4.9.x up to and including 4.9.190, 4.14.x up to and including 4.14.141, 4.19.x up to and including 4.19.69, and 5.2.x up to and including 5.2.11. Misuse of the upstream "x86/ptr...

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.0 Opensuse Leap 15.1 Netapp Active Iq Performance Analytics Services -Debian Debian Linux 8.0 Netapp Service Processor -Netapp Baseboard Management Controller Firmware -

4

CVSSv2

Grafana prior to 4.6.5 and 5.x prior to 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

Grafana Grafana Redhat Enterprise Linux Workstation 7.0 Redhat Ceph Storage 3.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Netapp Active Iq Performance Analytics Services -Netapp Storagegrid Webscale Nas Bridge -

5.1

CVSSv2

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful at...

Oracle Jdk 1.8.0 Oracle Jre 1.8.0 Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Storagegrid Netapp Oncommand Insight -Netapp Active Iq Unified Manager Netapp 7-mode Transition Tool -Netapp Cloud Secure Agent -Netapp E-series Performance Analyzer -Netapp E-series Santricity Os Controller Netapp E-series Santricity Web Services -Netapp Santricity Unified Manager -

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook