Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp management services for netapp hci - vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) prior to 1.20.2 and 1.21.x prior to 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_...
Mit Kerberos 5 1.21Mit Kerberos 5Debian Debian Linux 10.0Netapp Hci -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -Netapp Ontap Tools -Netapp Clustered Data Ontap 9.0
5.3
CVSSv3
CVE-2023-2975
Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated...
Openssl OpensslNetapp Ontap Select Deploy Administration Utility -Netapp Management Services For Element Software And Netapp Hci -
6.1
CVSSv3
CVE-2020-23064
Cross Site Scripting vulnerability in jQuery 2.2.0 up to and including 3.x prior to 3.5.0 allows a remote malicious user to execute arbitrary code via the <options> element.
Jquery JqueryNetapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Brocade San Navigator -Netapp Virtual Desktop Service -
7.5
CVSSv3
CVE-2023-24329
An issue in the urllib.parse component of Python prior to 3.11.4 allows malicious users to bypass blocklisting methods by supplying a URL that starts with blank characters.
Python PythonFedoraproject Fedora 36Fedoraproject Fedora 37Fedoraproject Fedora 38Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -
7.2
CVSSv3
CVE-2022-37967
Windows Kerberos Elevation of Privilege Vulnerability
Microsoft Windows Server 2008 R2Microsoft Windows Server 2012 R2Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 -Microsoft Windows Server 2022 -Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -Samba Samba
8.1
CVSSv3
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability
Microsoft Windows Server 2008 R2Microsoft Windows Server 2012 R2Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 -Microsoft Windows Server 2022 -Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -Samba Samba
8.1
CVSSv3
CVE-2022-37966
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Microsoft Windows Server 2008 R2Microsoft Windows Server 2012 R2Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 -Microsoft Windows Server 2022 -Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -Samba Samba
7.5
CVSSv3
CVE-2022-45061
An issue exists in Python prior to 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames...
Python Python 3.11.0Python PythonFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp Element Software -Netapp Ontap Select Deploy Administration Utility -Netapp Hci -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Netapp Management Services For Element Software -Netapp Bootstrap Os -
7.5
CVSSv3
CVE-2022-43680
In libexpat up to and including 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
Libexpat Project LibexpatDebian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp Oncommand Workflow Automation -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Compute Node Firmware -
3.7
CVSSv3
CVE-2022-35252
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
Haxx CurlNetapp Element Software -Netapp Clustered Data Ontap -Netapp Solidfire -Netapp Hci Management Node -Netapp Bootstrap Os -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Apple MacosDebian Debian Linux 10.0Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook