VYPR

Cloud Backup

by NetApp

CVEs (349)

  • CVE-2021-22897MedJun 11, 2021
    Curl
    Curl
    risk 0.35cvss 5.3epss 0.03

    curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library,…

  • CVE-2020-14621MedJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.35cvss 5.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2020-14155MedJun 15, 2020
    Pcre
    Pcre
    risk 0.35cvss 5.3epss 0.04

    libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

  • CVE-2020-2830MedApr 15, 2020
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2020-2781MedApr 15, 2020
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.05

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2020-1730MedApr 13, 2020
    Libssh
    Libssh
    risk 0.35cvss 5.3epss 0.03

    A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the…

  • CVE-2019-18282MedJan 16, 2020
    Linux
    Kernel
    risk 0.35cvss 5.3epss 0.03

    The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of…

  • CVE-2019-19924MedDec 24, 2019
    SQLite
    SQLite
    risk 0.35cvss 5.3epss 0.08

    SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

  • CVE-2018-20685MedJan 10, 2019
    OpenSSH
    OpenSSH
    risk 0.35cvss 5.3epss 0.04

    In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.

  • CVE-2018-15919MedAug 28, 2018
    NetApp
    Cloud Backup
    risk 0.35cvss 5.3epss 0.04

    Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username…

  • CVE-2017-15906MedOct 26, 2017
    OpenSSH
    OpenSSH
    risk 0.35cvss 5.3epss 0.03

    The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

  • CVE-2017-10357MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2017-10350MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2017-10349MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2017-10348MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2017-10347MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2017-10281MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows…

  • CVE-2017-10109MedAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows…

  • CVE-2017-10108MedAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows…

  • CVE-2017-10053MedAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated…

Page 15 of 18