netapp element software management - vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

An issue exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.

Gnu Binutils 2.32 Netapp Element Software Management

7.5

CVSSv2

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions before 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Managemen...

Vmware Spring Boot Netapp Element Plug-in For Vcenter Server Netapp Management Services For Element Software And Netapp Hci Netapp Solidfire \\& Hci Management Node

4.6

CVSSv2

Logic bug in Intel Converged Security Management Engine 11.x may allow an malicious user to execute arbitrary code via local privileged access.

Intel Converged Security Management Engine Firmware 11.0 Netapp Element Software Management Node -

NA

jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-defau...

Jsoup Jsoup Netapp Oncommand Workflow Automation -Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -

2.1

CVSSv2

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

Linux Linux Kernel 4.14.90 Netapp Element Software Management Node -

2.1

CVSSv2

The mincore() implementation in mm/mincore.c in the Linux kernel up to and including 4.19.13 allowed local malicious users to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the ou...

Linux Linux Kernel Netapp Element Software Management Node -Netapp Active Iq Performance Analytics Services -

1 Github repository1 Article

6.9

CVSSv2

An issue exists in __split_huge_pmd in mm/huge_memory.c in the Linux kernel prior to 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

Linux Linux Kernel Netapp Cloud Backup -Netapp Element Software -Netapp Solidfire -Netapp Hci Management Node -Netapp Hci Bootstrap Os -Netapp H410c Firmware -

NA

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated...

Openssl Openssl Netapp Ontap Select Deploy Administration Utility -Netapp Management Services For Element Software And Netapp Hci -

6.5

CVSSv2

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check ...

Redis Hiredis Debian Debian Linux 9.0 Netapp Management Services For Element Software And Netapp Hci -

3 Github repositories

NA

An issue exists in Python prior to 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames...

Python Python 3.11.0 Python Python Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Netapp Element Software -Netapp Ontap Select Deploy Administration Utility -Netapp Hci -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Netapp Management Services For Element Software -Netapp Bootstrap Os -

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook