VYPR

E Series Performance Analyzer

by NetApp

CVEs (61)

  • CVE-2021-32640MedMay 25, 2021
    Ws Project
    Ws
    risk 0.28cvss 5.3epss 0.03

    ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server. The vulnerability has been fixed in [email protected] (https://github.com/websockets/ws/commit/00c425e…

  • CVE-2019-13118MedJul 1, 2019
    Xmlsoft
    Libxslt
    risk 0.28cvss 5.3epss 0.05

    In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.

  • CVE-2020-14782LowOct 21, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14581LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-14579LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14578LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14577LowJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2778LowApr 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks…

  • CVE-2020-2773LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2757LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2756LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2755LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2659LowJan 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-2654LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

  • CVE-2020-2590LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2583LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…

  • CVE-2019-13272HigKEVJul 17, 2019
    Linux
    Kernel
    risk 0.19cvss 7.8epss 0.52

    In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process…

  • CVE-2021-28163LowApr 1, 2021
    Eclipse
    Jetty
    risk 0.18cvss 2.7epss 0.04

    In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that…

  • CVE-2021-27358HigMar 18, 2021
    Grafana
    Grafana
    risk 0.07cvss 7.5epss 0.83

    The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.

  • CVE-2022-21713MedFeb 8, 2022
    Grafana
    Grafana
    risk 0.00cvss 4.3epss 0.01

    Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle user authorization. `/teams/:teamId` will allow an authenticated attacker to view unintended data by querying for the…

Page 3 of 4