EUVD-2015-7785

Malware in sbrugna...

EUVD-2017-6967

Malware in sbrugna...

EUVD-2018-17251

Malware in sbrugna...

PT-2019-10986

Name of the Vulnerable Software and Affected Versions: NetApp SnapCenter Server versions prior to 4.1 Description: The issue concerns the transmission of a sensitive cookie in plain text over an unencrypted channel due to the lack of a secure flag in an HTTPS session. Recommendations: For version...

CVE-2017-15515: Improper Neutralization of Input During Web Page Generation

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...

PT-2019-8023

Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server versions prior to 4.0 Description The issue allows a privileged user to inject arbitrary scripts into the custom secondary policy label field, potentially leading to cross-site scripting. Recommendations For versions...

CVE-2018-5482: Missing Encryption of Sensitive Data

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel...

CVE-2017-15516: Cross-Site Request Forgery (CSRF)

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery CSRF vulnerability which could be used to cause an unintended authenticated action in the user interface...

PT-2017-14079

Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server versions 1.1 through 2.x Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This could potentially be used to cause an unintended authenticated action in the user interface...

CVE-2015-7887

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups...

CVE-2015-7887: Improper Access Control

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups...

PT-2017-7289

Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server version 1.0 Description The issue allows remote authenticated users to list and delete backups. Recommendations For NetApp SnapCenter Server version 1.0, update to a version that contains a fix for this issue, however ...

PT-2017-7956

Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server versions 1.0 through 1.0P1 Description The issue allows remote attackers to partially bypass authentication, enabling them to list and delete backups. Recommendations For versions 1.0 through 1.0P1, update to a version...

CVE-2016-1502: Improper Authentication

NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. A security vulnerability exists in NetApp SnapCenter Server that allows an attacker to bypass the authentication...