netapp oncommand unified manager core package 5.2 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x prior to 5.2.2P1 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Netapp Oncommand Unified Manager Core Package 5.2.2 Netapp Oncommand Unified Manager Core Package 5.2 Netapp Oncommand Unified Manager Core Package 5.0.2 Netapp Oncommand Unified Manager Core Package 5.0.1 Netapp Oncommand Unified Manager Core Package 5.0 Netapp Oncommand Unified Manager Core Package 5.2.1 Netapp Oncommand Unified Manager Core Package 5.1

5

CVSSv2

NetApp OnCommand Unified Manager Core Package 5.x prior to 5.2.2P1 might allow remote malicious users to obtain sensitive information via vectors involving error messages.

Netapp Oncommand Unified Manager Core Package 5.0.1 Netapp Oncommand Unified Manager Core Package 5.0 Netapp Oncommand Unified Manager Core Package 5.2.1 Netapp Oncommand Unified Manager Core Package 5.1 Netapp Oncommand Unified Manager Core Package 5.2.2 Netapp Oncommand Unified Manager Core Package 5.2 Netapp Oncommand Unified Manager Core Package 5.0.2

4.3

CVSSv2

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...

3 Github repositories

10

CVSSv2

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the ...

7 Github repositories1 Article

9.3

CVSSv2

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1152 Github repositories28 Articles

6.5

CVSSv2

Buffer overflow in the password management functionality in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

6.5

CVSSv2

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

7.5

CVSSv2

The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

4

CVSSv2

The decodenetnum function in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

1 EDB exploit

4

CVSSv2

ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook