VYPR

Cloud Backup

by NetApp

CVEs (349)

  • CVE-2019-11068CriApr 10, 2019
    Xmlsoft
    Libxslt
    risk 0.57cvss 9.8epss 0.05

    libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

  • CVE-2020-5863HigMar 27, 2020
    Nginx
    Controller
    risk 0.56cvss 8.6epss 0.01

    In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upload a new license to the system but cannot view or modify any other components…

  • CVE-2021-36160HigSep 16, 2021
    Apache
    HTTP Server
    risk 0.54cvss 7.5epss 0.63

    A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

  • CVE-2021-34798HigSep 16, 2021
    Apache
    HTTP Server
    risk 0.54cvss 7.5epss 0.65

    Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

  • CVE-2020-14664HigJul 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful…

  • CVE-2020-14583HigJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2805HigApr 15, 2020
    Fedoraproject
    Fedora
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2803HigApr 15, 2020
    Fedoraproject
    Fedora
    risk 0.54cvss 8.3epss 0.06

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2018-2964HigJul 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2942HigJul 18, 2018
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2941HigJul 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2826HigApr 19, 2018
    NetApp
    Oncommand Insight
    risk 0.54cvss 8.3epss 0.05

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2018-2825HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2018-2638HigJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2017-10116HigAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows…

  • CVE-2017-10114HigAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java…

  • CVE-2017-10074HigAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2023-28656HigMay 3, 2023
    Nginx
    NGINX Management Suite
    risk 0.53cvss 8.1epss 0.01

    NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2021-4044HigDec 14, 2021
    OpenSSL Project
    OpenSSL
    risk 0.53cvss 7.5epss 0.50

    Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is mishandled by…

  • CVE-2020-14305HigDec 2, 2020
    Linux
    Kernel
    risk 0.53cvss 8.1epss 0.05

    An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest…

Page 3 of 18