E-series Performance Analyzer (Netapp) - vulnerabilities (CVEs)

61 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-12-07. Vendor: Netapp.

CVEs of E-series Performance Analyzer

CVE-2022-23491 - CVSS 7.5 (high), 2022-12-07: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi…
CVE-2022-45061 - CVSS 7.5 (high), 2022-11-09: An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490)…
CVE-2022-31123 - CVSS 7.8 (high), 2022-10-13: Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature…
CVE-2021-3999 - CVSS 7.8 (high), 2022-08-24: A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A…
CVE-2022-31107 - CVSS 7.5 (high), 2022-07-15: Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious…
CVE-2022-31097 - CVSS 8.7 (high), 2022-07-15: Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, 8.5.9, 8.4.10, and 8.3.10 are…
CVE-2022-21713 - CVSS 4.3 (medium), 2022-02-08: Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle…
CVE-2022-21703 - CVSS 8.8 (high), 2022-02-08: Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site request forgery vulnerability which allows…
CVE-2022-21702 - CVSS 6.5 (medium), 2022-02-08: Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the Grafana datasource or…
CVE-2021-4044 - CVSS 7.5 (high), 2021-12-14: Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative…
CVE-2021-26707 - CVSS 9.8 (critical), 2021-06-02: The merge-deep library before 3.0.3 for Node.js can be tricked into overwriting properties of Object.prototype or adding new properties to it. These…
CVE-2021-33587 - CVSS 7.5 (high), 2021-05-28: The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
CVE-2021-33623 - CVSS 7.5 (high), 2021-05-28: The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end()…
CVE-2021-32640 - CVSS 5.3 (medium), 2021-05-25: ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the `Sec-Websocket-Protocol` header can be used to…
CVE-2021-23383 - CVSS 9.8 (critical), 2021-05-04: The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an…
CVE-2021-28164 - CVSS 5.3 (medium), 2021-04-01: In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access…
CVE-2021-28163 - CVSS 2.7 (low), 2021-04-01: In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of…
CVE-2021-28165 - CVSS 7.5 (high), 2021-04-01: In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
CVE-2021-3449 - CVSS 5.9 (medium), 2021-03-25: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits…
CVE-2021-21267 - CVSS 7.5 (high), 2021-03-19: Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address validation…
CVE-2021-27358 - CVSS 7.5 (high), 2021-03-18: The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a…
CVE-2021-20231 - CVSS 9.8 (critical), 2021-03-12: A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
CVE-2021-22884 - CVSS 7.5 (high), 2021-03-03: Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not…
CVE-2021-22883 - CVSS 7.5 (high), 2021-03-03: Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol'…
CVE-2021-27218 - CVSS 7.5 (high), 2021-02-15: An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit…
CVE-2021-27219 - CVSS 7.5 (high), 2021-02-15: An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an…
CVE-2020-14782 - CVSS 3.7 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271,…
CVE-2020-11110 - CVSS 5.4 (medium), 2020-07-27: Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that…
CVE-2020-14664 - CVSS 8.3 (high), 2020-07-15: Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit…
CVE-2020-14621 - CVSS 5.3 (medium), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251,…
CVE-2020-14593 - CVSS 7.4 (high), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251,…
CVE-2020-14581 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and…
CVE-2020-14583 - CVSS 8.3 (high), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261,…
CVE-2020-14577 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251,…
CVE-2020-14579 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and…
CVE-2020-14578 - CVSS 3.7 (low), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and…
CVE-2020-14556 - CVSS 4.8 (medium), 2020-07-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251,…
CVE-2020-13379 - CVSS 8.2 (high), 2020-06-03: The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to…
CVE-2020-1967 - CVSS 7.5 (high), 2020-04-21: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a…
CVE-2020-2830 - CVSS 5.3 (medium), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251,…
CVE-2020-2816 - CVSS 7.5 (high), 2020-04-15: Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable…
CVE-2020-2805 - CVSS 8.3 (high), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251,…
CVE-2020-2803 - CVSS 8.3 (high), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251,…
CVE-2020-2800 - CVSS 4.8 (medium), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java…
CVE-2020-2781 - CVSS 5.3 (medium), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241,…
CVE-2020-2778 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to…
CVE-2020-2773 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251,…
CVE-2020-2767 - CVSS 4.8 (medium), 2020-04-15: Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to…
CVE-2020-2757 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251,…
CVE-2020-2756 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251,…
CVE-2020-2755 - CVSS 3.7 (low), 2020-04-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241,…
CVE-2020-2659 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and…
CVE-2020-2654 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and…
CVE-2020-2601 - CVSS 6.8 (medium), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241,…
CVE-2020-2604 - CVSS 8.1 (high), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241,…
CVE-2020-2585 - CVSS 5.9 (medium), 2020-01-15: Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit…
CVE-2020-2583 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241,…
CVE-2020-2593 - CVSS 4.8 (medium), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241,…
CVE-2020-2590 - CVSS 3.7 (low), 2020-01-15: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241,…
CVE-2019-13272 - CVSS 7.8 (high), 2019-07-17: In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace…
CVE-2019-13118 - CVSS 5.3 (medium), 2019-07-01: In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination…