netapp e-series santricity management plug-ins - vulnerabilities and exploits

(subscribe to this query)

In Eclipse Jetty versions 9.4.0 up to and including 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions pre...

Eclipse Jetty Netapp E-series Santricity Management Plug-ins -Netapp E-series Santricity Os Controller Netapp E-series Santricity Web Services Proxy -Netapp Element Software -Netapp Hyper Converged Infrastructure -Netapp Oncommand System Manager Netapp Oncommand Unified Manager -Netapp Santricity Cloud Connector -Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Snapmanager -

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful at...

Oracle Jdk 1.8.0 Oracle Jre 1.8.0 Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp E-series Performance Analyzer -Netapp E-series Santricity Management Plug-ins -Netapp E-series Santricity Os Controller Netapp E-series Santricity Storage Manager -Netapp E-series Santricity Web Services -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Plug-in For Symantec Netbackup -

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network...

Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 11.0.8 Oracle Jdk 15 Oracle Jre 1.8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Active Iq Unified Manager Netapp E-series Performance Analyzer -Netapp E-series Santricity Management Plug-ins -Netapp E-series Santricity Os Controller Netapp E-series Santricity Storage Manager -

libxslt up to and including 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

Xmlsoft Libxslt Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Debian Debian Linux 8.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Oracle Jdk 8.0 Netapp Active Iq Unified Manager -Netapp Cloud Backup -

1 Github repository

In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.

Xmlsoft Libxslt 1.1.33 Opensuse Leap 15.1 Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp E-series Performance Analyzer -Netapp E-series Santricity Management Plug-ins -Netapp E-series Santricity Os Controller Netapp E-series Santricity Storage Manager -Netapp E-series Santricity Web Services -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ...

Oracle Jdk 1.6.0 Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 1.9.0 Oracle Jre 1.6.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 1.9.0 Netapp Active Iq Unified Manager Netapp Cloud Backup -Netapp E-series Santricity Management Plug-ins -Netapp E-series Santricity Os Controller

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jre 1.8.0 Oracle Openjdk 7 Oracle Openjdk 8 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Netapp Active Iq Unified Manager Netapp E-series Performance Analyzer -

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with...

Oracle Commerce Experience Manager 11.3.2 Oracle Commerce Guided Search 11.3.2 Oracle Graalvm 19.3.0.2 Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 11.0.5 Oracle Jdk 13.0.1 Oracle Jre 1.8.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Eus 7.7

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compr...

Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 11.0.5 Oracle Jdk 13.0.1 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 11.0.5 Oracle Jre 13.0.1 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Desktop 6.0

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc...

Oracle Jdk 1.6.0 Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 1.9.0 Oracle Jre 1.6.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 1.9.0 Redhat Satellite 5.8 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Eus 7.4

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook