Netapp

Snapmanager

180 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2019-10246

  • EPSS 1.7%
  • Published 22.04.2019 20:29:00
  • Last modified 21.11.2024 04:18:44

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory co...

5.3

CVE-2019-10247

  • EPSS 6.59%
  • Published 22.04.2019 20:29:00
  • Last modified 21.11.2024 04:18:44

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 4...

9.8

CVE-2019-11068

  • EPSS 1.01%
  • Published 10.04.2019 20:29:01
  • Last modified 21.11.2024 04:20:28

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is su...

5.3

CVE-2019-7317

Exploit
  • EPSS 0.99%
  • Published 04.02.2019 08:29:00
  • Last modified 21.11.2024 04:48:00

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

3.1

CVE-2019-2449

  • EPSS 2.56%
  • Published 16.01.2019 19:30:32
  • Last modified 21.11.2024 04:40:53

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoco...

3.1

CVE-2019-2422

  • EPSS 0.24%
  • Published 16.01.2019 19:30:31
  • Last modified 21.11.2024 04:40:50

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker...

4.3

CVE-2019-2426

  • EPSS 0.41%
  • Published 16.01.2019 19:30:31
  • Last modified 21.11.2024 04:40:51

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacke...

7.5

CVE-2018-1000632

Exploit
  • EPSS 1%
  • Published 20.08.2018 19:31:31
  • Last modified 21.11.2024 03:40:16

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be explo...

8.3

CVE-2018-2964

  • EPSS 0.84%
  • Published 18.07.2018 13:29:03
  • Last modified 21.11.2024 04:04:51

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

5.9

CVE-2018-2973

  • EPSS 0.12%
  • Published 18.07.2018 13:29:03
  • Last modified 21.11.2024 04:04:52

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unau...