Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp e-series performance analyzer - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2022-45061
An issue exists in Python prior to 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames...
Python Python 3.11.0Python PythonFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Element Software -Netapp Ontap Select Deploy Administration Utility -Netapp Hci -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Netapp Management Services For Element Software -Netapp Bootstrap Os -
7.8
CVSSv3
CVE-2022-31123
Grafana is an open source observability and data visualization platform. Versions before 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsig...
Grafana GrafanaNetapp E-series Performance Analyzer -
7.8
CVSSv3
CVE-2021-3999
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to pote...
Gnu GlibcDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Ontap Select Deploy Administration Utility -Netapp E-series Performance Analyzer -Netapp Nfs Plug-inNetapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -
7.5
CVSSv3
CVE-2022-31107
Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP which provides a login name to take ove...
Grafana GrafanaNetapp E-series Performance Analyzer -
8.7
CVSSv3
CVE-2022-31097
Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch before 9.0.3, 8.5.9, 8.4.10, and 8.3.10 are vulnerable to stored cross-site scripting via the Unified Alerting feature of Grafana. An attacker can exploit this vulnerability to...
Grafana GrafanaNetapp E-series Performance Analyzer -
8.8
CVSSv3
CVE-2022-21703
Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site request forgery vulnerability which allows malicious users to elevate their privileges by mounting cross-origin attacks against authenticated high-privilege Grafana ...
Grafana GrafanaGrafana Grafana 3.0.0Netapp E-series Performance AnalyzerFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
4.3
CVSSv3
CVE-2022-21713
Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle user authorization. `/teams/:teamId` will allow an authenticated malicious user to view unintended data by querying for the...
Grafana GrafanaGrafana Grafana 5.0.0Netapp E-series Performance AnalyzerFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
5.4
CVSSv3
CVE-2022-21702
Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the Grafana datasource or plugin proxy and trick a user to visit this HTML page using a specially crafted link and execute a Cross-site Scripting (X...
Grafana GrafanaGrafana Grafana 2.0.0Netapp E-series Performance AnalyzerFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
7.5
CVSSv3
CVE-2021-4044
Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is mishandled by OpenSSL...
Openssl Openssl 1.1.0Openssl OpensslOpenssl Openssl 3.0.0Netapp Cloud Backup -Netapp Snapcenter -Netapp Ontap Select Deploy Administration Utility -Netapp E-series Performance Analyzer -Netapp A250 Firmware -Netapp 500f Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Nodejs Node.js
9.8
CVSSv3
CVE-2021-26707
The merge-deep library prior to 3.0.3 for Node.js can be tricked into overwriting properties of Object.prototype or adding new properties to it. These properties are then inherited by every object in the program, thus facilitating prototype-pollution attacks against applications ...
Merge-deep Project Merge-deepNetapp E-series Performance Analyzer -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook