netapp oncommand system manager vulnerabilities and exploits

(subscribe to this query)

A flaw was found in jackson-databind prior to 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Fasterxml Jackson-databind Netapp Oncommand Insight -Netapp Service Level Manager -Netapp Oncommand Api Services -Netapp Active Iq Unified Manager -Apache Nifi Debian Debian Linux 9.0 Oracle Commerce Guided Search And Experience Manager 11.3.2

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server co...

Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Apache Tomcat Canonical Ubuntu Linux 20.04 Oracle Workload Manager 18c Oracle Workload Manager 19c Oracle Workload Manager 12.2.0.1 Oracle Siebel Ui Framework Oracle Mysql Enterprise Monitor Opensuse Leap 15.1 Opensuse Leap 15.2 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Oncommand System Manager 3.0 Netapp Oncommand System Manager 3.1.3

1 Github repository

GStreamer prior to 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.

Gstreamer Project Gstreamer Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os Controller Oracle Openjdk 8

A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mecha...

Haxx Curl Fedoraproject Fedora 37 Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack...

Apache Tomcat Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Workload Manager 18c Oracle Workload Manager 19c Oracle Workload Manager 12.2.0.1 Canonical Ubuntu Linux 16.04 Opensuse Leap 15.1 Netapp Oncommand System Manager

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unau...

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthe...

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows lo...

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allo...

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook