Vulnerabilidades do Netapp Management Services For Element Software
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Netapp Management Services For Element Software: 6 registro(s), com versões afetadas e correções.cpe:2.3:a:netapp:management_services_for_element_software
CVE-2023-24329
Alta · 7.5
CWE-20 17/02/2023
An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
CVE-2022-45061
Alta · 7.5
CWE-407 09/11/2022
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.
CVE-2022-37434
Crítica · 9.8
CWE-787 05/08/2022
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
CVE-2018-25032
Alta · 7.5
CWE-787 25/03/2022
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2021-3737
Alta · 7.5
CWE-400 04/03/2022
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
CVE-2022-0391
Alta · 7.5
CWE-74 09/02/2022
A flaw was found in Python, specifically within the urllib.parse module. This module helps break...
A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.