Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp manageability software development kit - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-40304
An issue exists in libxml2 prior to 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
Xmlsoft Libxml2Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Snapmanager -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Apple MacosApple WatchosApple TvosApple IpadosApple Iphone Os
4.3
CVSSv2
CVE-2022-29824
In libxml2 prior to 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other softwa...
Xmlsoft Libxml2Xmlsoft LibxsltFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapdrive -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Manageability Software Development Kit -Netapp Active Iq Unified Manager -Netapp Snapmanager -Oracle Zfs Storage Appliance Kit 8.8Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -
4.3
CVSSv2
CVE-2022-23308
valid.c in libxml2 prior to 2.9.13 has a use-after-free of ID and IDREF attributes.
Xmlsoft Libxml2Fedoraproject Fedora 34Debian Debian Linux 9.0Apple Mac Os X 10.15.7Apple Mac Os XApple Iphone OsApple WatchosApple TvosApple IpadosApple MacosNetapp Snapdrive -Netapp Snapmanager -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Bootstrap Os -Netapp H300s Firmware -
7.5
CVSSv2
CVE-2021-3711
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Storage Encryption -Netapp E-series Santricity Os ControllerOracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Session Border Controller 8.4Oracle Enterprise Communications Broker 3.2.0Oracle Zfs Storage Appliance Kit 8.8Oracle Peoplesoft Enterprise Peopletools 8.59
5.8
CVSSv2
CVE-2021-3712
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Manageability Software Development Kit -Netapp Storage Encryption -Netapp E-series Santricity Os ControllerMcafee Epolicy Orchestrator 5.10.0Mcafee Epolicy OrchestratorTenable Tenable.scTenable Nessus Network MonitorOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Zfs Storage Appliance Kit 8.8Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerOracle Mysql Workbench
4
CVSSv2
CVE-2021-3541
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
Xmlsoft Libxml2Redhat Jboss Core Services -Oracle Zfs Storage Appliance Kit 8.8Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Manageability Software Development Kit -Netapp Ontap Select Deploy Administration Utility -Netapp Smi-s Provider -Netapp Snapdrive -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -
7.5
CVSSv2
CVE-2021-3517
There is a flaw in the xml entity encoding functionality of libxml2 in versions prior to 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most like...
Xmlsoft Libxml2Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp E-series Santricity Storage Manager -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp Manageability Software Development Kit -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os ControllerNetapp Hci H410c Firmware -
6.8
CVSSv2
CVE-2021-3518
There's a flaw in libxml2 in versions prior to 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability...
Xmlsoft Libxml2Debian Debian Linux 9.0Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Hci H410c Firmware -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0Oracle Real User Experience Insight 13.5.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0
4.3
CVSSv2
CVE-2021-3537
A vulnerability found in libxml2 in versions prior to 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the applic...
Xmlsoft Libxml2Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Hci H410c Firmware -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Openjdk 8Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0
4.3
CVSSv2
CVE-2020-1971
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Api Gateway 11.1.2.4.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Business Intelligence 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Business Intelligence 5.5.0.0.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle MysqlOracle Graalvm 19.3.4Oracle Graalvm 20.3.0Oracle Essbase 21.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook