Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp vasa provider for clustered data ontap vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2016-9841
inffast.c in zlib 1.2.8 might allow context-dependent malicious users to have unspecified impact by leveraging improper pointer arithmetic.
Zlib ZlibOpensuse Leap 42.2Opensuse Leap 42.1Opensuse Opensuse 13.2Debian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Oracle MysqlOracle Database Server 18cOracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.6.0Oracle Jre 1.6.0Oracle Jre 1.8.0Oracle Jre 1.7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Eus 7.4
9.6
CVSSv3
CVE-2017-10346
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network ...
Oracle Jdk 1.9.0Oracle Jre 1.9.0Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.6.0Oracle Jre 1.6.0Oracle Jre 1.8.0Oracle Jre 1.7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Eus 7.4Redhat Enterprise Linux Eus 7.5Redhat Satellite 5.8Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Eus 7.6
9
CVSSv3
CVE-2018-2938
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise ...
Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.6.0Oracle Jre 1.6.0Oracle Jre 1.7.0Oracle Jre 1.8.0Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Snapmanager -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Active Iq Unified Manager -Netapp Plug-in For Symantec Netbackup -Netapp E-series Santricity Os ControllerNetapp Virtual Storage ConsoleNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap
8.3
CVSSv3
CVE-2018-2942
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Jav...
Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jre 1.7.0Oracle Jre 1.8.0Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Snapmanager -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Active Iq Unified Manager -Netapp Plug-in For Symantec Netbackup -Netapp E-series Santricity Os ControllerNetapp Virtual Storage ConsoleNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap
8.1
CVSSv3
CVE-2019-11815
An issue exists in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel prior to 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
Linux Linux KernelLinux Linux Kernel 5.1Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Netapp Active Iq Unified ManagerNetapp Hci Management Node -Netapp Snapprotect -Netapp Solidfire -Netapp Storage Replication Adapter 7.2Netapp Vasa Provider For Clustered Data OntapNetapp Virtual Storage ConsoleNetapp Hci Compute Node -Netapp Hci Storage Node -Netapp Cn1610 Firmware -
8.1
CVSSv3
CVE-2018-20836
An issue exists in the Linux kernel prior to 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
Linux Linux KernelCanonical Ubuntu Linux 16.04Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0F5 Traffix Signaling Delivery Controller 5.1.0F5 Traffix Signaling Delivery Controller 5.0.0Netapp Virtual Storage ConsoleNetapp Active Iq Unified ManagerNetapp Vasa Provider For Clustered Data OntapNetapp Solidfire \\& Hci Management Node -Netapp Snapprotect -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Storage Replication Adapter For Clustered Data Ontap -Opensuse Leap 15.0Opensuse Leap 15.1
8.1
CVSSv3
CVE-2016-6904
Versions of VASA Provider for Clustered Data ONTAP before 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated malicious user to obtain authentication credentials.
Netapp Vasa Provider
7.7
CVSSv3
CVE-2019-3900
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could ...
Linux Linux KernelFedoraproject Fedora 29Fedoraproject Fedora 30Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Virtual Storage Console For Vmware VsphereNetapp Storage Replication Adapter For Clustered Data Ontap For Vmware VsphereNetapp Cn1610 Firmware -Oracle Sd-wan Edge 8.2Fedoraproject Fedora 28
7.5
CVSSv3
CVE-2021-28165
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Eclipse JettyOracle Communications Services Gatekeeper 7.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Element Manager 8.2.2Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Rest Data ServicesJenkins JenkinsNetapp Santricity Cloud Connector -Netapp E-series Santricity Os ControllerNetapp E-series Performance AnalyzerNetapp SnapcenterNetapp E-series Santricity StorageNetapp Santricity Web Services ProxyNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp E-series Santricity Web ServicesNetapp Ontap ToolsNetapp Cloud Manager
7.5
CVSSv3
CVE-2020-11868
ntpd in ntp prior to 4.2.8p14 and 4.3.x prior to 4.3.100 allows an off-path malicious user to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.
Ntp Ntp 4.2.8Ntp NtpRedhat Enterprise Linux 7.0Netapp Clustered Data Ontap -Netapp Virtual Storage ConsoleNetapp Data Ontap -Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Hci Storage Node Firmware -Netapp Fabric-attached Storage 8300 Firmware -Netapp Fabric-attached Storage 8700 Firmware -Netapp Fabric-attached Storage A400 Firmware -Netapp All Flash Fabric-attached Storage 8300 Firmware -Netapp All Flash Fabric-attached Storage 8700 Firmware -Netapp All Flash Fabric-attached Storage A400 Firmware -Debian Debian Linux 8.0Opensuse Leap 15.1Opensuse Leap 15.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook