ontap select deploy administration utility vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has ...

Vmware Tools Vmware Open Vm Tools Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0 Netapp Ontap Select Deploy Administration Utility -

5.5

CVSSv3

GNU Binutils prior to 2.40 exists to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Gnu Binutils Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Ontap Select Deploy Administration Utility -

5.5

CVSSv3

GNU Binutils prior to 2.40 exists to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.

Gnu Binutils Netapp Ontap Select Deploy Administration Utility -Fedoraproject Fedora 38 Fedoraproject Fedora 39

7.5

CVSSv3

iperf3 prior to 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

Es Iperf3 Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap 9.0 Apple Macos 14.0 Apple Macos

5.3

CVSSv3

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated...

Openssl Openssl Netapp Ontap Select Deploy Administration Utility -Netapp Management Services For Element Software And Netapp Hci -

7.5

CVSSv3

An issue in the urllib.parse component of Python prior to 3.11.4 allows malicious users to bypass blocklisting methods by supplying a URL that starts with blank characters.

Python Python Fedoraproject Fedora 36 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -Netapp Management Services For Netapp Hci -

1 Github repository

7.4

CVSSv3

A timing side-channel in the handling of RSA ClientKeyExchange messages exists in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker woul...

Gnu Gnutls 3.6.8-11.el8 2 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Converged Systems Advisor Agent -

6.5

CVSSv3

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address...

Openbsd Openssh 9.1 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Ontap Select Deploy Administration Utility -Netapp A250 Firmware -Netapp 500f Firmware -Netapp C250 Firmware -

10 Github repositories

7.8

CVSSv3

Use After Free in GitHub repository vim/vim before 9.0.0882.

Vim Vim Netapp Ontap Select Deploy Administration Utility -

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook