Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp steelstore - vulnerabilities and exploits

(subscribe to this query)
3.7
CVSSv3
CVE-2020-14782
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network...
Oracle Jdk 11.0.8Oracle Jdk 1.7.0Oracle Jdk 15Oracle Jdk 1.8.0Oracle Jre 1.8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Web Services Proxy -Netapp E-series Santricity Storage Manager -Netapp Active Iq Unified ManagerNetapp E-series Santricity Os ControllerNetapp Santricity Unified Manager -Netapp E-series Performance Analyzer -Netapp E-series Santricity Management Plug-ins -Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1Mcafee Epolicy Orchestrator 5.10.0Opensuse Leap 15.2
9.8
CVSSv3
CVE-2020-8758
Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions prior to 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned ...
Intel Standard ManageabilityIntel Active Management Technology FirmwareNetapp Steelstore Cloud Integrated Storage -
7.5
CVSSv3
CVE-2020-8620
In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
Isc BindIsc Bind 9.11.3Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Opensuse Leap 15.1Opensuse Leap 15.2Netapp Steelstore Cloud Integrated Storage -Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04
7.5
CVSSv3
CVE-2020-8621
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward ...
Isc BindOpensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Synology Dns ServerNetapp Steelstore Cloud Integrated Storage -
6.5
CVSSv3
CVE-2020-8622
In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send ...
Isc BindIsc Bind 9.9.3Isc Bind 9.11.21Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Netapp Steelstore Cloud Integrated Storage -Opensuse Leap 15.1Opensuse Leap 15.2Synology Dns ServerOracle Communications Diameter Signaling Router
7.5
CVSSv3
CVE-2020-8623
In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the...
Isc BindIsc Bind 9.10.5Isc Bind 9.11.21Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Leap 15.1Opensuse Leap 15.2Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Synology Dns ServerNetapp Steelstore Cloud Integrated Storage -
4.3
CVSSv3
CVE-2020-8624
In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a sp...
Isc BindIsc Bind 9.11.3Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Netapp Steelstore Cloud Integrated Storage -Fedoraproject Fedora 31Fedoraproject Fedora 32Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Opensuse Leap 15.2
3.7
CVSSv3
CVE-2020-16166
The Linux kernel up to and including 5.7.11 allows remote malicious users to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.
Linux Linux KernelOpensuse Leap 15.1Opensuse Leap 15.2Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerNetapp Solidfire -Netapp Hci Management Node -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Santricity Os ControllerNetapp Hci Bootstrap Os -Netapp StoragegridNetapp H410c Firmware -Oracle Sd-wan Edge 8.2
7.8
CVSSv3
CVE-2020-15778
scp in OpenSSH up to and including 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfe...
Openbsd Openssh 8.3Openbsd OpensshNetapp A700s Firmware -Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerNetapp Solidfire -Netapp Hci Management Node -Netapp Hci Storage Node -Netapp Hci Compute Node -Broadcom Fabric Operating System -
7.8
CVSSv3
CVE-2020-15852
An issue exists in the Linux kernel 5.5 up to and including 5.7.9, as used in Xen up to and including 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs because tss_invalidate_io_bitmap mishandling causes a loss of sync...
Linux Linux KernelXen XenNetapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Solidfire Baseboard Management Controller -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook