Netapp

Oncommand Performance Manager

73 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.6

CVE-2017-10089

  • EPSS 2.42%
  • Veröffentlicht 08.08.2017 15:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multi...

9.6

CVE-2017-10090

  • EPSS 2.56%
  • Veröffentlicht 08.08.2017 15:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated ...

5.3

CVE-2017-10053

  • EPSS 3.45%
  • Veröffentlicht 08.08.2017 15:29:01
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerabi...

6.5

CVE-2015-7855

Exploit
  • EPSS 31.07%
  • Veröffentlicht 07.08.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

7.5

CVE-2015-7691

  • EPSS 7.1%
  • Veröffentlicht 07.08.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to a...

7.5

CVE-2015-7692

  • EPSS 7.34%
  • Veröffentlicht 07.08.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

7.5

CVE-2015-7701

  • EPSS 6.52%
  • Veröffentlicht 07.08.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).

6.5

CVE-2015-7702

  • EPSS 5.21%
  • Veröffentlicht 07.08.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

7.5

CVE-2015-7704

  • EPSS 10.95%
  • Veröffentlicht 07.08.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.

9.8

CVE-2015-7705

  • EPSS 12.35%
  • Veröffentlicht 07.08.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.