Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp active iq unified manager for vmware vsphere vulnerabilities and exploits

(subscribe to this query)
4.7
CVSSv3
CVE-2019-3901
A race condition in perf_event_open() allows local malicious users to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execv...
Linux Linux KernelDebian Debian Linux 8.0Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Virtual Storage Console For Vmware VsphereNetapp Storage Replication Adapter For Clustered Data Ontap For Vmware VsphereNetapp Cn1610 Firmware -
5.3
CVSSv3
CVE-2022-23235
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions before 9.10P1 are susceptible to a vulnerability which could allow an malicious user to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data tha...
Netapp Active Iq Unified Manager 9.10Netapp Active Iq Unified Manager
4.4
CVSSv3
CVE-2020-8575
Active IQ Unified Manager for VMware vSphere and Windows versions before 9.5 are susceptible to a vulnerability which allows administrative users to cause Denial of Service (DoS).
Netapp Active Iq Unified Manager
6.5
CVSSv3
CVE-2022-23240
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions before 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via unspecified vectors.
Netapp Active Iq Unified Manager
4.8
CVSSv3
CVE-2022-23239
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions before 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack.
Netapp Active Iq Unified Manager
7.7
CVSSv3
CVE-2019-3900
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could ...
Linux Linux KernelFedoraproject Fedora 29Fedoraproject Fedora 30Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Virtual Storage Console For Vmware VsphereNetapp Storage Replication Adapter For Clustered Data Ontap For Vmware VsphereNetapp Cn1610 Firmware -Oracle Sd-wan Edge 8.2Fedoraproject Fedora 28
5.5
CVSSv3
CVE-2019-3882
A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cau...
Linux Linux Kernel 3.10Linux Linux Kernel 4.14Linux Linux Kernel 4.18Fedoraproject FedoraDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Opensuse Leap 42.3Opensuse Leap 15.0Opensuse Leap 15.1Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Virtual Storage Console For Vmware VsphereNetapp Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere
6.5
CVSSv3
CVE-2019-3874
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
Linux Linux KernelDebian Debian Linux 8.0Redhat Enterprise Linux 7.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Netapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Cn1610 Firmware -
8.8
CVSSv3
CVE-2019-3846
A flaw that allowed an malicious user to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
Linux Linux KernelRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Netapp A700s Firmware -Netapp Cn1610 Firmware -Netapp H610s Firmware -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager For Vmware VsphereFedoraproject Fedora 29Fedoraproject Fedora 30Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 42.3Opensuse Leap 15.0Opensuse Leap 15.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook