netapp management services for element software and netapp hci vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv2

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check ...

Redis Hiredis Debian Debian Linux 9.0 Netapp Management Services For Element Software And Netapp Hci -

3 Github repositories

NA

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated...

Openssl Openssl Netapp Ontap Select Deploy Administration Utility -Netapp Management Services For Element Software And Netapp Hci -

4.3

CVSSv2

Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a den...

Apache Tomcat Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Management Services For Element Software And Netapp Hci -

7.5

CVSSv2

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions before 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Managemen...

Vmware Spring Boot Netapp Element Plug-in For Vcenter Server Netapp Management Services For Element Software And Netapp Hci Netapp Solidfire \\& Hci Management Node

NA

Cross Site Scripting vulnerability in jQuery 2.2.0 up to and including 3.x prior to 3.5.0 allows a remote malicious user to execute arbitrary code via the <options> element.

Jquery Jquery Netapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Brocade San Navigator -Netapp Virtual Desktop Service -

4

CVSSv2

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenar...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -

5

CVSSv2

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no eno...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -Jenkins Jenkins

6

CVSSv2

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of service or remote code execution. The vulnerability involves changing the default prot...

Redis Redis Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Management Services For Element Software And Netapp Hci -Oracle Communications Operations Monitor 4.3 Oracle Communications Operations Monitor 4.4 Oracle Communications Operations Monitor 5.0

4

CVSSv2

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

Vmware Spring Framework Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Metrocluster Tiebreaker -Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0

2 Github repositories

5

CVSSv2

jsoup is a Java library for working with HTML. Those using jsoup versions before 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinit...

Jsoup Jsoup Quarkus Quarkus Oracle Webcenter Portal 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Flexcube Universal Banking Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Webcenter Portal 12.2.1.4.0 Oracle Primavera Unifier 20.12 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Messaging Server 8.1 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Primavera Unifier 21.12 Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5 Oracle Flexcube Universal Banking 14.5 Oracle Hospitality Token Proxy Service 19.2 Oracle Retail Customer Management And Segmentation Foundation Netapp Management Services For Element Software And Netapp Hci -Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook