Vulnerabilidades de Netapp
CVEs publicadas que afetam produtos de Netapp: 411 registro(s), com severidade, exploração e correções.
Active Iq Unified Manager 133H700s Firmware 108H300s Firmware 107H410s Firmware 107H500s Firmware 107Ontap Select Deploy Administration Utility 82Cloud Backup 81H410c Firmware 64Clustered Data Ontap 59Oncommand Insight 51Oncommand Workflow Automation 50Solidfire 43Hci Management Node 40Solidfire & Hci Management Node 39Steelstore Cloud Integrated Storage 38Snapcenter 35H700e Firmware 33H300e Firmware 32H500e Firmware 32Snapmanager 29Solidfire, Enterprise Sds & Hci Storage Node 24Bootstrap Os 23Clustered Data Ontap Antivirus Connector 18Hci Compute Node Firmware 17E-series Santricity Os Controller 17Service Level Manager 16Hci Bootstrap Os 15H610s Firmware 15Element Software 15Smi-s Provider 14Oncommand Shift 14Snap Creator Framework 12A250 Firmware 12Oncommand Unified Manager 12Solidfire Baseboard Management Controller Firmware 12Hci Compute Node 12Oncommand Api Services 12Oncommand Balance 11Solidfire & Hci Storage Node 11H610c Firmware 11
CVE-2019-2215
Alta · 7.8
KEV Urgente · 76 Exploit público CWE-416 11/10/2019
Android Kernel Use-After-Free Vulnerability
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVE-2019-16905
Alta · 7.8
CWE-190 09/10/2019
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.
CVE-2019-17267
Crítica · 9.8
CWE-502 06/10/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
CVE-2019-16943
Crítica · 9.8
CWE-502 01/10/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.
CVE-2019-16942
Crítica · 9.8
CWE-502 01/10/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.
CVE-2019-5094
Alta · 7.5
CWE-787 24/09/2019
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
CVE-2019-5482
Crítica · 9.8
CWE-787 16/09/2019
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVE-2019-5481
Crítica · 9.8
CWE-415 16/09/2019
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVE-2019-16335
Crítica · 9.8
CWE-502 15/09/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVE-2019-14540
Crítica · 9.8
CWE-502 15/09/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVE-2019-16168
Média · 6.5
CWE-369 09/09/2019
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
CVE-2019-15219
Média · 4.6
CWE-476 19/08/2019
NULL Pointer Dereference em Linux Linux Kernel
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.
CVE-2019-15218
Média · 4.6
CWE-476 19/08/2019
NULL Pointer Dereference em Linux Linux Kernel
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.
CVE-2019-15217
Média · 4.6
CWE-476 19/08/2019
NULL Pointer Dereference em Linux Linux Kernel
An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-14379
Crítica · 9.8
CWE-1321 29/07/2019
Prototype Pollution em Fasterxml Jackson-databind
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.
CVE-2019-13272
Alta · 7.8
KEV Urgente · 76 Exploit público 17/07/2019
Linux Kernel Improper Privilege Management Vulnerability
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
CVE-2019-5443
Alta · 7.8
CWE-427 02/07/2019
A non-privileged user or program can put code and a config file in a known non-privileged path ...
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it wants.
CVE-2019-10160
Crítica · 9.8
CWE-172 07/06/2019
A security regression of CVE-2019-9636 was discovered in python since commit...
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.
CVE-2019-5436
Alta · 7.8
CWE-787 28/05/2019
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVE-2019-0211
Alta · 7.8
KEV Urgente · 70 Exploit público CWE-416 08/04/2019
Apache HTTP Server Privilege Escalation Vulnerability
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.
CVE-2019-3861
Crítica · 9.1
CWE-125 25/03/2019
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVE-2019-3860
Crítica · 9.1
CWE-125 25/03/2019
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVE-2019-3857
Alta · 8.8
CWE-190 25/03/2019
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVE-2019-3856
Alta · 8.8
CWE-190 25/03/2019
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVE-2019-3863
Alta · 8.8
CWE-787 25/03/2019
A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...
A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.