NetApp Snap Creator Framework Information Disclosure Vulnerability

NetApp Snap Creator Framework is the United States NetApp company's set of integrated NetApp functionality plug-ins and popular third-party applications framework. An information disclosure vulnerability exists in versions of NetApp Snap Creator Framework prior to 4.3.1. An attacker could exploit...

Information disclosure

NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user...

CVE-2016-7172

NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user...

CVE-2016-7172

NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user...

CVE-2016-7172

NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user...

CVE-2016-7172

CVE-2016-7172 affects NetApp Snap Creator Framework prior to version 4.3.1, where an information disclosure vulnerability allows unauthorized viewing of sensitive data. The issue is tied to NetApp Snap Creator Framework and is documented across multiple sources (NVD/CNVD/etc.) with consistent pro...

SISCO MMS-EASE and AX-S4 ICCP Denial of Service Vulnerabilities

SISCO MMS-EASE and AX-S4 ICCP are both products of SISCO Corporation, USA. The former is a set of C programming interfaces APIs for MMS Manufacturing Message Specification and the latter is a set of data sharing software.SNAP-Lite Utility is one of the data mining and analysis components. A...

Code injection

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet...

CVE-2015-6574

CVE-2015-6574 affects the SNAP Lite component in Siemens SISCO MMS-EASE and AX-S4 ICCP products. The vulnerability allows remote attackers to cause a denial-of-service (CPU consumption) by sending a specially crafted packet. Public documentation confirms affected products include SIPROTEC 5 devic...

CVE-2015-6574

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet...

CVE-2016-1587

The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection. An attacker could have used the controls to remotely add a valid, but malicious, snap package, from the Store,...

StoreFront 3.0: MMC snap in error when attempting to Set Unified Experience as Default

Storefront 3.0 gives an MMC snap in error when attempting to Set Unified Experience as Default...

NetApp Snap Creator Framework Clickjacking Vulnerability

NetApp Snap Creator Framework is the United States NetApp company's set of integrated NetApp functionality plug-ins and popular third-party applications framework. A clickjacking vulnerability exists in NetApp Snap Creator Framework version 4.3P1, which can be exploited by an attacker to compromi...

NetApp Snap Creator Framework Cross-Site Request Forgery Vulnerability

NetApp Snap Creator Framework is the United States NetApp company's set of integrated NetApp functionality plug-ins and popular third-party applications framework. A cross-site request forgery vulnerability exists in versions of NetApp Snap Creator Framework prior to 4.3.P1, which can be exploite...

ubuntu-core-launcher package information disclosure vulnerability

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation. ubuntu-core-launcher package is a core application package for launching Ubuntu. A security vulnerability exists in the 'setupsnappyosmounts' function in the ubuntu-core-launcher package prio...

Information disclosure

The setupsnappyosmounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."...

CVE-2016-1580

The CVE-2016-1580 issue affects the ubuntu-core-launcher when running on Ubuntu classic systems. The setup_snappy_os_mounts function improperly determines the mount point of bind mounts used by snaps, enabling a remote attacker to obtain sensitive information or gain privileges via a snap whose n...

CVE-2016-1580

The setupsnappyosmounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."...

USN-2956-1 ubuntu-core-launcher vulnerability

Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when using snaps on Ubuntu classic systems eg, traditional desktop and server. If a user were tricked into installing a malicious sn...

USN-2956-1: ubuntu-core-launcher vulnerability

Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when using snaps on Ubuntu classic systems eg, traditional desktop and server. If a user were tricked into installing a malicious sn...