Element Software (Netapp) - vulnerabilities (CVEs)

100 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-02-05. Vendor: Netapp.

CVEs of Element Software

CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-33602 - CVSS 7.4 (high), 2024-05-06: nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS…
CVE-2022-45061 - CVSS 7.5 (high), 2022-11-09: An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490)…
CVE-2022-35252 - CVSS 3.7 (low), 2022-09-23: When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver…
CVE-2022-32205 - CVSS 4.3 (medium), 2022-07-07: A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large…
CVE-2022-32208 - CVSS 5.9 (medium), 2022-07-07: When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle…
CVE-2022-32207 - CVSS 9.8 (critical), 2022-07-07: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a…
CVE-2022-32206 - CVSS 6.5 (medium), 2022-07-07: curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different…
CVE-2022-2068 - CVSS 9.8 (critical), 2022-06-21: In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise…
CVE-2022-1678 - CVSS 7.5 (high), 2022-05-25: An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be…
CVE-2022-21496 - CVSS 5.3 (medium), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are…
CVE-2022-21476 - CVSS 7.5 (high), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
CVE-2022-21443 - CVSS 3.7 (low), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
CVE-2021-4203 - CVSS 6.8 (medium), 2022-03-25: A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the…
CVE-2021-3753 - CVSS 4.7 (medium), 2022-02-16: A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to…
CVE-2021-38202 - CVSS 7.5 (high), 2021-08-08: fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS…
CVE-2021-38201 - CVSS 7.5 (high), 2021-08-08: net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by…
CVE-2021-38199 - CVSS 6.5 (medium), 2021-08-08: fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a…
CVE-2021-38203 - CVSS 5.5 (medium), 2021-08-08: btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks…
CVE-2021-38160 - CVSS 7.8 (high), 2021-08-07: In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len…
CVE-2020-29368 - CVSS 7 (high), 2020-11-28: An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write…
CVE-2020-13817 - CVSS 7.4 (high), 2020-06-04: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting…
CVE-2020-13143 - CVSS 6.5 (medium), 2020-05-18: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an…
CVE-2020-12888 - CVSS 5.3 (medium), 2020-05-15: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2020-12769 - CVSS 5.5 (medium), 2020-05-09: An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and…
CVE-2020-12771 - CVSS 5.5 (medium), 2020-05-09: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2020-12770 - CVSS 6.7 (medium), 2020-05-09: An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
CVE-2020-10690 - CVSS 6.5 (medium), 2020-05-08: There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a…
CVE-2020-12653 - CVSS 7.8 (high), 2020-05-05: An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users…
CVE-2020-11884 - CVSS 7 (high), 2020-04-29: In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in…
CVE-2019-18683 - CVSS 7 (high), 2019-11-04: An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux…
CVE-2019-17498 - CVSS 8.1 (high), 2019-10-21: In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an…
CVE-2019-15098 - CVSS 4.6 (medium), 2019-08-16: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2018-20855 - CVSS 3.3 (low), 2019-07-26: An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never…
CVE-2019-0201 - CVSS 5.9 (medium), 2019-05-23: An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when…
CVE-2019-11068 - CVSS 9.8 (critical), 2019-04-10: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1…
CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
CVE-2019-9077 - CVSS 7.8 (high), 2019-02-24: An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.
CVE-2019-6109 - CVSS 6.8 (medium), 2019-01-31: An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can…
CVE-2019-6110 - CVSS 6.8 (medium), 2019-01-31: In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the…
CVE-2019-3462 - CVSS 8.1 (high), 2019-01-28: Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker,…
CVE-2017-3138 - CVSS 6.5 (medium), 2019-01-16: named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a…
CVE-2017-3137 - CVSS 7.5 (high), 2019-01-16: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in…
CVE-2017-3136 - CVSS 5.9 (medium), 2019-01-16: A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could…
CVE-2017-3140 - CVSS 5.9 (medium), 2019-01-16: If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while…
CVE-2018-16888 - CVSS 4.7 (medium), 2019-01-14: It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged…
CVE-2018-16866 - CVSS 4.3 (medium), 2019-01-11: An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw…
CVE-2018-20685 - CVSS 5.3 (medium), 2019-01-10: In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The…
CVE-2018-0735 - CVSS 5.9 (medium), 2018-10-29: The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing…
CVE-2018-16597 - CVSS 5.5 (medium), 2018-09-21: An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate…
CVE-2018-17182 - CVSS 7.8 (high), 2018-09-19: An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker…
CVE-2017-7657 - CVSS 9.8 (critical), 2018-06-26: In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled),…
CVE-2018-12538 - CVSS 8.8 (high), 2018-06-22: In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it…
CVE-2018-7183 - CVSS 9.8 (critical), 2018-03-08: Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq…
CVE-2018-7182 - CVSS 7.5 (high), 2018-03-06: The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6…
CVE-2018-6485 - CVSS 9.8 (critical), 2018-02-01: An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause…
CVE-2017-10388 - CVSS 7.5 (high), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10346 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10349 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10356 - CVSS 6.2 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10348 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10355 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
CVE-2017-10347 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10350 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151,…
CVE-2017-10357 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE:…
CVE-2017-10345 - CVSS 3.1 (low), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10293 - CVSS 6.1 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9.…
CVE-2017-10285 - CVSS 9.6 (critical), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161,…
CVE-2017-10309 - CVSS 7.1 (high), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily…
CVE-2017-10281 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10295 - CVSS 4 (medium), 2017-10-19: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
CVE-2017-10274 - CVSS 6.8 (medium), 2017-10-19: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144…
CVE-2017-10243 - CVSS 6.5 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE:…
CVE-2017-10193 - CVSS 3.1 (low), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10176 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10198 - CVSS 6.8 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10125 - CVSS 7.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131.…
CVE-2017-10135 - CVSS 5.9 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10115 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10096 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10105 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10109 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10114 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult…
CVE-2017-10118 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE:…
CVE-2017-10102 - CVSS 9 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
CVE-2017-10108 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
CVE-2017-10111 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE:…
CVE-2017-10116 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java…
CVE-2017-10101 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10107 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141…
CVE-2017-10110 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily…
CVE-2017-10078 - CVSS 8.1 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily…
CVE-2017-10087 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10074 - CVSS 8.3 (high), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10086 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily…
CVE-2017-10090 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141…
CVE-2017-10067 - CVSS 7.5 (high), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10081 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151,…
CVE-2017-10089 - CVSS 9.6 (critical), 2017-08-08: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131.…
CVE-2017-10053 - CVSS 5.3 (medium), 2017-08-08: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE:…