Netapp

Active Iq Unified Manager

848 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
Exploit
  • EPSS 0.06%
  • Veröffentlicht 29.02.2024 01:44:18
  • Zuletzt bearbeitet 23.05.2025 15:30:30

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

Exploit
  • EPSS 0.02%
  • Veröffentlicht 29.02.2024 01:44:18
  • Zuletzt bearbeitet 25.03.2025 20:15:21

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.

  • EPSS 0.45%
  • Veröffentlicht 26.02.2024 16:27:56
  • Zuletzt bearbeitet 13.02.2025 18:16:46

Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file d...

  • EPSS 55.8%
  • Veröffentlicht 23.02.2024 05:15:08
  • Zuletzt bearbeitet 13.02.2025 18:16:47

Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/6...

  • EPSS 8.33%
  • Veröffentlicht 19.02.2024 22:15:48
  • Zuletzt bearbeitet 07.05.2025 12:27:53

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immedia...

Medienbericht Exploit
  • EPSS 13.77%
  • Veröffentlicht 14.02.2024 16:15:45
  • Zuletzt bearbeitet 23.12.2025 20:20:08

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka...

  • EPSS 0.18%
  • Veröffentlicht 13.02.2024 14:15:46
  • Zuletzt bearbeitet 21.11.2024 08:44:00

To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that ca...

  • EPSS 0.14%
  • Veröffentlicht 13.02.2024 14:15:45
  • Zuletzt bearbeitet 21.11.2024 08:41:55

A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an a...

  • EPSS 0.14%
  • Veröffentlicht 13.02.2024 14:15:45
  • Zuletzt bearbeitet 29.03.2025 00:15:16

A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18...

  • EPSS 0.11%
  • Veröffentlicht 13.02.2024 14:15:45
  • Zuletzt bearbeitet 21.11.2024 08:42:15

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11....