Storage Automation Store (Netapp) - vulnerabilities (CVEs)

113 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-04-18. Vendor: Netapp.

CVEs of Storage Automation Store

CVE-2019-11035 - CVSS 9.1 (critical), 2019-04-18: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past…
CVE-2019-11034 - CVSS 9.1 (critical), 2019-04-18: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past…
CVE-2019-9638 - CVSS 7.5 (high), 2019-03-09: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in…
CVE-2019-9641 - CVSS 9.8 (critical), 2019-03-09: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in…
CVE-2019-9637 - CVSS 7.5 (high), 2019-03-09: An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is…
CVE-2019-9640 - CVSS 7.5 (high), 2019-03-09: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
CVE-2019-9639 - CVSS 7.5 (high), 2019-03-09: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in…
CVE-2019-0192 - CVSS 9.8 (critical), 2019-03-07: In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a…
CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
CVE-2019-9023 - CVSS 9.8 (critical), 2019-02-22: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read…
CVE-2019-9022 - CVSS 7.5 (high), 2019-02-22: An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a…
CVE-2019-9025 - CVSS 9.8 (critical), 2019-02-22: An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in…
CVE-2019-9021 - CVSS 9.8 (critical), 2019-02-22: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading…
CVE-2019-9024 - CVSS 7.5 (high), 2019-02-22: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC…
CVE-2019-9020 - CVSS 9.8 (critical), 2019-02-22: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode()…
CVE-2019-6110 - CVSS 6.8 (medium), 2019-01-31: In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the…
CVE-2019-6109 - CVSS 6.8 (medium), 2019-01-31: An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can…
CVE-2018-17189 - CVSS 5.3 (medium), 2019-01-30: In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request…
CVE-2018-17199 - CVSS 7.5 (high), 2019-01-30: In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to…
CVE-2019-6977 - CVSS 8.8 (high), 2019-01-27: gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before…
CVE-2019-2531 - CVSS 4.9 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior,…
CVE-2019-2534 - CVSS 7.1 (high), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior,…
CVE-2019-2537 - CVSS 4.9 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and…
CVE-2019-2530 - CVSS 4.9 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.13 and prior.…
CVE-2019-2533 - CVSS 6.5 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 8.0.13…
CVE-2019-2536 - CVSS 5 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 8.0.13 and prior.…
CVE-2019-2529 - CVSS 6.5 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior,…
CVE-2019-2532 - CVSS 4.9 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.24 and…
CVE-2019-2535 - CVSS 4.1 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.13 and prior.…
CVE-2019-2539 - CVSS 4.9 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 8.0.13 and prior.…
CVE-2019-2513 - CVSS 2.5 (low), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell). Supported versions that are affected are 8.0.13 and prior. Difficult to…
CVE-2019-2436 - CVSS 5.5 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.13 and prior.…
CVE-2019-2434 - CVSS 6.5 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.24 and prior and…
CVE-2019-2420 - CVSS 4.9 (medium), 2019-01-16: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and…
CVE-2018-20685 - CVSS 5.3 (medium), 2019-01-10: In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The…
CVE-2018-0734 - CVSS 5.9 (medium), 2018-10-30: The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm…
CVE-2018-10933 - CVSS 9.1 (critical), 2018-10-17: A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first…
CVE-2018-3280 - CVSS 4.9 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON). Supported versions that are affected are 8.0.12 and prior. Easily…
CVE-2018-3286 - CVSS 4.3 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.12 and…
CVE-2018-3285 - CVSS 4.9 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows). Supported versions that are affected are 8.0.12 and prior. Easily…
CVE-2018-3283 - CVSS 4.4 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging). Supported versions that are affected are 5.7.23 and prior and…
CVE-2018-3276 - CVSS 4.9 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.41 and prior,…
CVE-2018-3279 - CVSS 4.9 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.12 and…
CVE-2018-3278 - CVSS 4.9 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and…
CVE-2018-3251 - CVSS 6.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and…
CVE-2018-3247 - CVSS 5.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge). Supported versions that are affected are 5.6.41 and prior, 5.7.23…
CVE-2018-3212 - CVSS 4.9 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema). Supported versions that are affected are 8.0.12 and…
CVE-2018-3203 - CVSS 6.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior.…
CVE-2018-3187 - CVSS 5.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.23 and prior and…
CVE-2018-3185 - CVSS 5.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and…
CVE-2018-3156 - CVSS 6.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and…
CVE-2018-3155 - CVSS 7.7 (high), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and…
CVE-2018-3144 - CVSS 5.9 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). Supported versions that are affected are 5.7.23 and prior…
CVE-2018-3145 - CVSS 6.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 8.0.12 and prior. Easily…
CVE-2018-3143 - CVSS 6.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and…
CVE-2018-3137 - CVSS 6.5 (medium), 2018-10-17: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.12 and prior.…
CVE-2018-11763 - CVSS 5.9 (medium), 2018-09-25: In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any…
CVE-2018-17082 - CVSS 6.1 (medium), 2018-09-16: The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding:…
CVE-2018-15132 - CVSS 7.5 (high), 2018-08-07: An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo…
CVE-2018-14884 - CVSS 7.5 (high), 2018-08-03: An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a…
CVE-2018-14883 - CVSS 7.5 (high), 2018-08-03: An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based…
CVE-2018-14851 - CVSS 5.5 (medium), 2018-08-02: exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote…
CVE-2017-9118 - CVSS 7.5 (high), 2018-08-02: PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
CVE-2017-9120 - CVSS 9.8 (critical), 2018-08-02: PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact…
CVE-2018-3070 - CVSS 6.5 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.60 and prior,…
CVE-2018-3074 - CVSS 5.3 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.11 and…
CVE-2018-3078 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily…
CVE-2018-3081 - CVSS 5 (medium), 2018-07-18: Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40…
CVE-2018-3067 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.11 and prior.…
CVE-2018-3073 - CVSS 6.5 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.11 and prior.…
CVE-2018-3077 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11…
CVE-2018-3080 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily…
CVE-2018-3084 - CVSS 2.8 (low), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Core / Client). Supported versions that are affected are 8.0.11 and prior.…
CVE-2018-3066 - CVSS 3.3 (low), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40…
CVE-2018-3071 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported versions that are affected are 5.7.22 and prior. Easily…
CVE-2018-3075 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.11 and…
CVE-2018-3079 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.11 and prior. Easily…
CVE-2018-3082 - CVSS 2.7 (low), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.11 and prior. Easily…
CVE-2018-3054 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11…
CVE-2018-3060 - CVSS 6.5 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and…
CVE-2018-3064 - CVSS 7.1 (high), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and…
CVE-2018-3058 - CVSS 4.3 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and…
CVE-2018-3062 - CVSS 5.3 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.40 and prior,…
CVE-2018-3056 - CVSS 4.3 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.22 and…
CVE-2018-3061 - CVSS 4.9 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior. Easily…
CVE-2018-3065 - CVSS 6.5 (medium), 2018-07-18: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior and 8.0.11…
CVE-2018-8026 - CVSS 5.5 (medium), 2018-07-05: This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml,…
CVE-2018-12882 - CVSS 9.8 (critical), 2018-06-26: exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a…
CVE-2018-1333 - CVSS 7.5 (high), 2018-06-18: By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service.…
CVE-2018-8014 - CVSS 9.8 (critical), 2018-05-16: The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and…
CVE-2018-1258 - CVSS 8.8 (high), 2018-05-11: Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An…
CVE-2018-10549 - CVSS 8.8 (high), 2018-04-29: An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an…
CVE-2018-10545 - CVSS 4.7 (medium), 2018-04-29: An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing…
CVE-2018-10548 - CVSS 7.5 (high), 2018-04-29: An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to…
CVE-2018-10547 - CVSS 6.1 (medium), 2018-04-29: An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected…
CVE-2018-10546 - CVSS 7.5 (high), 2018-04-29: An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c…
CVE-2018-2846 - CVSS 4.9 (medium), 2018-04-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.7.21 and…
CVE-2018-2839 - CVSS 4.9 (medium), 2018-04-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.21 and prior. Easily…
CVE-2018-2812 - CVSS 5.5 (medium), 2018-04-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior.…
CVE-2018-2818 - CVSS 4.9 (medium), 2018-04-19: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59…