Lucene search
+L

43 matches found

Prion
Prion
•added 2017/09/01 1:29 p.m.•28 views

Authentication flaw

NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and 1 obtain sensitive information from or 2 modify volumes via vectors related to UTF-8 in the volume language...

7.5CVSS7.1AI score0.016EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/01 12:00 a.m.•4 views

CVE-2016-1895: Use of Externally-Controlled Format String

NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling...

6.5CVSS5.9AI score0.0147EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/08/21 12:00 a.m.•15 views

NetApp Data ONTAP Denial of Service Vulnerability (CNVD-2017-30013)

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in NetApp Data ONTAP versions prior to 8.2.5....

5.9CVSS5.8AI score0.01783EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2017/08/18 4:29 p.m.•8 views

CVE-2017-12859

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

5.9CVSS5.6AI score0.01783EPSS
SaveExploits0References3
OSV
OSV
•added 2017/08/18 4:29 p.m.•11 views

CVE-2017-12859

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

5.9CVSS5.8AI score0.01783EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/18 12:00 a.m.•3 views

CVE-2017-12859: Improper Input Validation

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

5.9CVSS5.8AI score0.01783EPSS
SaveExploits0References2
OSV
OSV
•added 2017/07/03 4:29 p.m.•15 views

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

7.5CVSS5.8AI score0.01457EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/03 12:00 a.m.•5 views

CVE-2016-3400: Undefined Security Weakness

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

7.5CVSS7.2AI score0.01457EPSS
SaveExploits0References2
OSV
OSV
•added 2017/03/01 8:59 p.m.•18 views

CVE-2016-5374

NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...

8.8CVSS5.8AI score0.02059EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/01 12:00 a.m.•5 views

CVE-2016-5374: Undefined Security Weakness

NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...

8.8CVSS5.9AI score0.02059EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/07 12:00 a.m.•2 views

CVE-2016-6495: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access...

5.9CVSS5.9AI score0.0148EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/01/20 12:00 a.m.•14 views

NetApp Data ONTAP Information Disclosure Vulnerability

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in NetApp Data ONTAP versions prior to 8.2.4P...

4.3CVSS6.5AI score0.01231EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/18 12:00 a.m.•6 views

CVE-2015-7886: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors...

4.3CVSS5.5AI score0.01231EPSS
SaveExploits0References2
NVD
NVD
•added 2008/07/28 5:41 p.m.•28 views

CVE-2008-3349

Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service system crash, or obtain sensitive information, probably related to insufficient access control for HTTP requests...

10CVSS7.7AI score0.03417EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2008/07/28 5:00 p.m.•32 views

CVE-2008-3349

Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service system crash, or obtain sensitive information, probably related to insufficient access control for HTTP requests...

7.7AI score0.03417EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/07/28 12:00 a.m.•4 views

CVE-2008-3349: Undefined Security Weakness

Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service system crash, or obtain sensitive information, probably related to insufficient access control for HTTP requests...

10CVSS6.4AI score0.03417EPSS
SaveExploits0References2
OSV
OSV
•added 2008/06/10 6:32 p.m.•9 views

DEBIAN-CVE-2008-0960

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

10CVSS6.8AI score0.6879EPSS
SaveExploits7References1
RedHat Linux
RedHat Linux
•added 2008/06/10 2:07 p.m.•89 views

net-snmp SNMPv3 authentication bypass (VU#877044)

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

10CVSS5.9AI score0.6879EPSS
SaveExploits7References4
RedHat Linux
RedHat Linux
•added 2008/06/10 7:01 a.m.•20 views

net-snmp SNMPv3 authentication bypass (VU#877044)

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

10CVSS5.9AI score0.6879EPSS
SaveExploits7References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/06/10 12:00 a.m.•4 views

CVE-2008-0960: Improper Authentication

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

10CVSS6.7AI score0.6879EPSS
SaveExploits7References2
Rows per page
Query Builder