Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

242 records

Vendor: NetApp Component: E-series Santricity Os Controller Clear all filters
TI-2024-05929 CVE-2024-6387 · GHSA-2x8c-95vh-gfv4

Openssh: regresshion - race condition in ssh allows rce/dos

Priority HIGH 82

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.99506 Published 2024-07-01 Partial fix · 8.7p1-38.el9_4.1, 8.7p1-12.el9_0.1 +5 CWE-364
TI-2024-17611 CVE-2024-26735 · GHSA-vmh5-6rg4-ggmq

ipv6: sr: fix possible use-after-free and null-ptr-deref

Priority LOW 25

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the gen…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00272 Published 2024-04-03 Partial fix · 4.19.308, 5.4.270 +6 CWE-416
TI-2024-17609 CVE-2024-26733 · GHSA-xqrq-q336-f78g

arp: Prevent overflow in arp_req_get().

Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00256 Published 2024-04-03 Partial fix · 5.10.211, 5.15.150 +4 CWE-787
TI-2022-18771 CVE-2022-39399 · GHSA-pvgf-45fp-3xpp

Improper access control in Oracle Java SE JDK and JRE

Priority LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02037 Published 2022-10-18 Partial fix CWE-284
TI-2022-06005 CVE-2022-21626 · GHSA-33pw-h52r-5vpg

Protection mechanism failure in Oracle Java SE JDK and JRE

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02433 Published 2022-10-18 Partial fix CWE-693
TI-2022-05998 CVE-2022-21619 · GHSA-3ggq-p922-54qp

Improper access control in Oracle Java SE JDK and JRE

Priority LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03328 Published 2022-10-18 Partial fix CWE-284
TI-2022-05997 CVE-2022-21618 · GHSA-wq9f-w2rj-j5wc

Improper authentication in Oracle Java SE JDK and JRE

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02811 Published 2022-10-18 Partial fix CWE-287
TI-2022-07372 CVE-2022-23237 · GHSA-xwfx-786r-2r6f

Open redirect in E-Series SANtricity OS Controller Software 11.x

Priority LOW 28

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0062 Published 2022-06-01 No fix listed CWE-601
TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

Improper access control in Oracle Java SE JDK and JRE

Priority MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284
TI-2021-03069 CVE-2021-4203 · GHSA-rh28-76xv-jcqc

Race condition in kernel

Priority LOW 34

A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01747 Published 2022-03-25 Partial fix CWE-362
Load more