Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp data ontap edge - vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2018-15919
Remotely observable behaviour in auth-gss2.c in OpenSSH up to and including 7.8 could be used by remote malicious users to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to ...
Openbsd OpensshNetapp Data Ontap Edge -Netapp Ontap Select Deploy -Netapp Steelstore -Netapp Cloud Backup -Netapp Cn1610 Firmware -
3.5
CVSSv2
CVE-2018-5736
An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to ca...
Isc Bind 9.12.0Isc Bind 9.12.1Netapp Data Ontap Edge -Netapp Cloud Backup -
5
CVSSv2
CVE-2018-5737
A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some ...
Isc Bind 9.12.0Isc Bind 9.12.1Netapp Cloud Backup -Netapp Data Ontap Edge -
5
CVSSv2
CVE-2018-5734
While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all o...
Isc Bind 9.10.6Isc Bind 9.10.5Netapp Solidfire Element Os Management Node -Netapp Data Ontap Edge -
4.3
CVSSv2
CVE-2017-3140
If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.
Isc Bind 9.9.10Isc Bind 9.10.5Isc BindNetapp Oncommand Balance -Netapp Element Software -Netapp Data Ontap Edge -
6.8
CVSSv2
CVE-2015-8960
The TLS protocol 1.2 and previous versions supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and ser...
Ietf Transport Layer SecurityNetapp Snap Creator Framework -Netapp Data Ontap Edge -Netapp Snapdrive -Netapp Snapmanager -Netapp Smi-s Provider -Netapp Host Agent -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Snapprotect -Netapp Oncommand Shift -Netapp Plug-in For Symantec Netbackup -Netapp System Setup -
4.3
CVSSv2
CVE-2016-9778
An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a confi...
Isc Bind 9.9.8Isc Bind 9.9.9Isc Bind 9.11.0Netapp Solidfire Element Os Management Node -Netapp Data Ontap Edge -
4
CVSSv2
CVE-2021-3541
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
Xmlsoft Libxml2Redhat Jboss Core Services -Oracle Zfs Storage Appliance Kit 8.8Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Manageability Software Development Kit -Netapp Ontap Select Deploy Administration Utility -Netapp Smi-s Provider -Netapp Snapdrive -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -
5
CVSSv2
CVE-2018-15473
OpenSSH up to and including 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Openbsd OpensshDebian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Netapp Cn1610 Firmware -Netapp Cloud Backup -Netapp Data Ontap Edge -Netapp Ontap Select Deploy -Netapp Steelstore Cloud Integrated Storage -Netapp Clustered Data Ontap -Netapp Service Processor -Netapp Data Ontap -Netapp Fas Baseboard Management Controller -Netapp Aff Baseboard Management Controller -
3.5
CVSSv2
CVE-2017-3138
named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some...
Isc Bind 9.11.1Isc Bind 9.11.0Isc Bind 9.10.4Isc Bind 9.9.10Isc Bind 9.10.5Isc Bind 9.9.9Netapp Data Ontap Edge -Netapp Oncommand Balance -Netapp Element Software -Debian Debian Linux 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook