Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp management services for element software - vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) prior to 1.20.2 and 1.21.x prior to 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_...
Mit Kerberos 5 1.21Mit Kerberos 5Debian Debian Linux 10.0Netapp Hci -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -Netapp Ontap Tools -Netapp Clustered Data Ontap 9.0
5.3
CVSSv3
CVE-2023-2975
Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated...
Openssl OpensslNetapp Ontap Select Deploy Administration Utility -Netapp Management Services For Element Software And Netapp Hci -
6.1
CVSSv3
CVE-2020-23064
Cross Site Scripting vulnerability in jQuery 2.2.0 up to and including 3.x prior to 3.5.0 allows a remote malicious user to execute arbitrary code via the <options> element.
Jquery JqueryNetapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Brocade San Navigator -Netapp Virtual Desktop Service -
7.5
CVSSv3
CVE-2023-24329
An issue in the urllib.parse component of Python prior to 3.11.4 allows malicious users to bypass blocklisting methods by supplying a URL that starts with blank characters.
Python PythonFedoraproject Fedora 36Fedoraproject Fedora 37Fedoraproject Fedora 38Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -
7.2
CVSSv3
CVE-2022-37967
Windows Kerberos Elevation of Privilege Vulnerability
Microsoft Windows Server 2008 R2Microsoft Windows Server 2012 R2Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 -Microsoft Windows Server 2022 -Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -Samba Samba
8.1
CVSSv3
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability
Microsoft Windows Server 2008 R2Microsoft Windows Server 2012 R2Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 -Microsoft Windows Server 2022 -Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -Samba Samba
8.1
CVSSv3
CVE-2022-37966
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Microsoft Windows Server 2008 R2Microsoft Windows Server 2012 R2Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 -Microsoft Windows Server 2022 -Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -Samba Samba
7.5
CVSSv3
CVE-2022-45061
An issue exists in Python prior to 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames...
Python Python 3.11.0Python PythonFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Element Software -Netapp Ontap Select Deploy Administration Utility -Netapp Hci -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Netapp Management Services For Element Software -Netapp Bootstrap Os -
3.7
CVSSv3
CVE-2022-35252
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
Haxx CurlNetapp Element Software -Netapp Clustered Data Ontap -Netapp Solidfire -Netapp Hci Management Node -Netapp Bootstrap Os -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Apple MacosDebian Debian Linux 10.0Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
6.1
CVSSv3
CVE-2022-36033
jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-defau...
Jsoup JsoupNetapp Oncommand Workflow Automation -Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook