NetApp
Page 22 of 26 — NetApp CVEs from a corpus of 2516, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9025 | Critical | 9.8 | 2019-02-22 | An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c… |
CVE-2019-9024 | High | 7.5 | 2019-02-22 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server… |
CVE-2019-9023 | Critical | 9.8 | 2019-02-22 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances… |
CVE-2019-9022 | High | 7.5 | 2019-02-22 | An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hosti… |
CVE-2019-9021 | Critical | 9.8 | 2019-02-22 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading fun… |
CVE-2019-9020 | Critical | 9.8 | 2019-02-22 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can… |
CVE-2019-9003 | High | 7.5 | 2019-02-22 | In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous ex… |
CVE-2018-5499 | High | 7.5 | 2019-02-12 | ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service (DoS). |
CVE-2019-5736 | High | 8.6 | 2019-02-11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host roo… |
CVE-2019-3823 | Medium | 4.3 | 2019-02-06 | libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer pass… |
CVE-2019-3822 | Critical | 9.8 | 2019-02-06 | libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth… |
CVE-2018-16890 | High | 7.5 | 2019-02-06 | libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vaut… |
CVE-2019-7317 | Medium | 5.3 | 2019-02-04 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. |
CVE-2018-5498 | Medium | 4.4 | 2019-02-01 | Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS)… |
CVE-2019-6110 | Medium | 6.8 | 2019-01-31 | In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the… |
CVE-2019-6109 | Medium | 6.8 | 2019-01-31 | An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can emplo… |
CVE-2018-17199 | High | 7.5 | 2019-01-30 | In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to… |
CVE-2018-17189 | Medium | 5.3 | 2019-01-30 | In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily… |
CVE-2019-3462 | High | 8.1 | 2019-01-28 | Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, pot… |
CVE-2019-6977 | High | 8.8 | 2019-01-27 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7… |
CVE-2018-5497 | Medium | 4.4 | 2019-01-24 | Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized use… |
CVE-2019-6260 | Critical | 9.8 | 2019-01-22 | The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow ar… |
CVE-2018-6445 | High | 7.5 | 2019-01-22 | A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which inclu… |
CVE-2018-6444 | Critical | 9.8 | 2019-01-22 | A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability cou… |
CVE-2018-6443 | High | 8.1 | 2019-01-22 | A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interfa… |
CVE-2018-5740 | High | 7.5 | 2019-01-16 | "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method… |
CVE-2018-5737 | Medium | 5.9 | 2019-01-16 | A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off… |
CVE-2018-5736 | Medium | 5.3 | 2019-01-16 | An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfe… |
CVE-2018-5734 | High | 7.5 | 2019-01-16 | While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFA… |
CVE-2017-3145 | High | 7.5 | 2019-01-16 | BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an ass… |
CVE-2017-3140 | Low | 3.7 | 2019-01-16 | If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while hand… |
CVE-2017-3138 | Medium | 6.5 | 2019-01-16 | named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a… |
CVE-2017-3137 | High | 7.5 | 2019-01-16 | Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in… |
CVE-2017-3136 | Medium | 5.9 | 2019-01-16 | A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately… |
CVE-2017-3135 | High | 7.5 | 2019-01-16 | Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIS… |
CVE-2016-9778 | High | 7.5 | 2019-01-16 | An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also p… |
CVE-2019-2539 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 8.0.13 and prior. Easi… |
CVE-2019-2537 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and… |
CVE-2019-2536 | Medium | 5.0 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 8.0.13 and prior. Diffi… |
CVE-2019-2535 | Medium | 4.1 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.13 and prior. Difficu… |
CVE-2019-2534 | High | 7.1 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior, 5.7… |
CVE-2019-2533 | Medium | 6.5 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 8.0.13 and… |
CVE-2019-2532 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.24 and p… |
CVE-2019-2531 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior, 5.7… |
CVE-2019-2530 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.13 and prior. Easil… |
CVE-2019-2529 | Medium | 6.5 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.2… |
CVE-2019-2513 | Low | 2.5 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell). Supported versions that are affected are 8.0.13 and prior. Difficult to expl… |
CVE-2019-2510 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and pr… |
CVE-2019-2503 | Medium | 6.4 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and pr… |
CVE-2019-2502 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.13 and prior. Easily exploitab… |
CVE-2019-2481 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.2… |
CVE-2019-2455 | Medium | 6.5 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 a… |
CVE-2019-2449 | Low | 3.1 | 2019-01-16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exp… |
CVE-2019-2436 | Medium | 5.5 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.13 and prior. Eas… |
CVE-2019-2435 | High | 8.1 | 2019-01-16 | Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 8.0.13 and prior and… |
CVE-2019-2434 | Medium | 6.5 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.24 and prior and 8.0.1… |
CVE-2019-2426 | Low | 3.7 | 2019-01-16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1… |
CVE-2019-2422 | Low | 3.1 | 2019-01-16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1… |
CVE-2019-2420 | Medium | 4.9 | 2019-01-16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and 8… |
CVE-2018-16888 | Medium | 4.7 | 2019-01-14 | It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged u… |
CVE-2018-16866 | Low | 3.3 | 2019-01-11 | An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw… |
CVE-2018-20685 | Medium | 5.3 | 2019-01-10 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact… |
CVE-2019-5489 | Medium | 5.5 | 2019-01-07 | The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other process… |
CVE-2018-5481 | High | 7.4 | 2019-01-07 | OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to… |
CVE-2018-14719 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds… |
CVE-2018-14718 | Critical | 9.8 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from poly… |
CVE-2018-1000873 | Medium | 6.5 | 2018-12-20 | Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-o… |
CVE-2018-19039 | Medium | 6.5 | 2018-12-13 | Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions. |
CVE-2018-20002 | Medium | 5.5 | 2018-12-10 | The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memor… |
CVE-2018-18314 | Critical | 9.8 | 2018-12-07 | Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations. |
CVE-2018-18313 | Critical | 9.1 | 2018-12-07 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. |
CVE-2018-18311 | Critical | 9.8 | 2018-12-07 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. |
CVE-2018-19932 | Medium | 5.5 | 2018-12-07 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and… |
CVE-2018-19931 | High | 7.8 | 2018-12-07 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer ove… |
CVE-2018-18312 | Critical | 9.8 | 2018-12-05 | Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. |
CVE-2018-1002105 | Critical | 9.8 | 2018-12-05 | In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver all… |
CVE-2018-5496 | Medium | 4.4 | 2018-12-04 | Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user. |
CVE-2018-5495 | Critical | 9.8 | 2018-11-14 | All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same net… |
CVE-2018-1842 | Low | 3.6 | 2018-11-09 | IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150… |
CVE-2018-0734 | Medium | 5.9 | 2018-10-30 | The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm… |
CVE-2018-0735 | Medium | 5.9 | 2018-10-29 | The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorith… |
CVE-2018-18607 | Medium | 5.5 | 2018-10-23 | An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There… |
CVE-2018-18606 | Medium | 5.5 | 2018-10-23 | An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31… |
CVE-2018-18605 | Medium | 5.5 | 2018-10-23 | A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), a… |
CVE-2018-10933 | Critical | 9.1 | 2018-10-17 | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first perform… |
CVE-2018-3286 | Medium | 4.3 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.12 and p… |
CVE-2018-3285 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows). Supported versions that are affected are 8.0.12 and prior. Easily… |
CVE-2018-3284 | Medium | 4.4 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and pr… |
CVE-2018-3283 | Medium | 4.4 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging). Supported versions that are affected are 5.7.23 and prior and 8.0… |
CVE-2018-3282 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior… |
CVE-2018-3280 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON). Supported versions that are affected are 8.0.12 and prior. Easily exp… |
CVE-2018-3279 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.12 and prior… |
CVE-2018-3278 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and… |
CVE-2018-3277 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and pr… |
CVE-2018-3276 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.41 and prior, 5.7.2… |
CVE-2018-3251 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior… |
CVE-2018-3247 | Medium | 5.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge). Supported versions that are affected are 5.6.41 and prior, 5.7.23 an… |
CVE-2018-3212 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema). Supported versions that are affected are 8.0.12 and pri… |
CVE-2018-3203 | Medium | 6.5 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior. Easil… |
CVE-2018-3200 | Medium | 4.9 | 2018-10-17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and pr… |