Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp storage automation store - vulnerabilities and exploits

(subscribe to this query)
9.1
CVSSv3
CVE-2019-11034
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
Php PhpCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 19.04Netapp Storage Automation Store -Redhat Software Collections 1.0Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3
9.1
CVSSv3
CVE-2019-11035
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
Php PhpCanonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Netapp Storage Automation Store -Redhat Software Collections 1.0Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Debian Debian Linux 8.0Debian Debian Linux 9.0
7.5
CVSSv3
CVE-2019-9637
An issue exists in PHP prior to 7.1.27, 7.2.x prior to 7.2.16, and 7.3.x prior to 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauth...
Php PhpDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 12.04Opensuse Leap 42.3Netapp Storage Automation Store -
7.5
CVSSv3
CVE-2019-9639
An issue exists in the EXIF component in PHP prior to 7.1.27, 7.2.x prior to 7.2.16, and 7.3.x prior to 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
Php PhpDebian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Netapp Storage Automation Store -Redhat Software Collections 1.0
7.5
CVSSv3
CVE-2019-9640
An issue exists in the EXIF component in PHP prior to 7.1.27, 7.2.x prior to 7.2.16, and 7.3.x prior to 7.3.3. There is an Invalid Read in exif_process_SOFn.
Php PhpCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Netapp Storage Automation Store -Redhat Software Collections 1.0
7.5
CVSSv3
CVE-2019-9638
An issue exists in the EXIF component in PHP prior to 7.1.27, 7.2.x prior to 7.2.16, and 7.3.x prior to 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
Php PhpDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Netapp Storage Automation Store -Redhat Software Collections 1.0
9.8
CVSSv3
CVE-2019-9641
An issue exists in the EXIF component in PHP prior to 7.1.27, 7.2.x prior to 7.2.16, and 7.3.x prior to 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
Php PhpDebian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Netapp Storage Automation Store -
9.8
CVSSv3
CVE-2019-0192
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution...
Apache SolrNetapp Storage Automation Store -
5.9
CVSSv3
CVE-2019-1559
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...
Openssl OpensslCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0Debian Debian Linux 9.0Netapp Hyper Converged Infrastructure -Netapp Cloud Backup -Netapp Santricity Smi-s Provider -Netapp Element Software -Netapp Snapdrive -Netapp Snapcenter -Netapp Storage Automation Store -Netapp Ontap Select Deploy -Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp StoragegridNetapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Service Processor -
9.8
CVSSv3
CVE-2019-9025
An issue exists in PHP 7.3.x prior to 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.
Php PhpNetapp Storage Automation Store -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook