EUVD-2017-6967

Malware in sbrugna...

EUVD-2015-7785

Malware in sbrugna...

EUVD-2018-17251

Malware in sbrugna...

CVE-2018-5482: Missing Encryption of Sensitive Data

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel...

CVE-2017-15515: Improper Neutralization of Input During Web Page Generation

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...

CVE-2017-15516: Cross-Site Request Forgery (CSRF)

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery CSRF vulnerability which could be used to cause an unintended authenticated action in the user interface...

CVE-2015-7887

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups...

CVE-2015-7887: Improper Access Control

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups...

CVE-2016-1502: Improper Authentication

NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. A security vulnerability exists in NetApp SnapCenter Server that allows an attacker to bypass the authentication...