Vulnerabilities

TI-2020-06883 CVE-2020-8585 · GHSA-xg84-ch2x-h237

Link following in OnCommand Unified Manager for 7-Mode

LOW 25

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00412 Published 2021-01-28 Fixed in 5.2.5 CWE-59

TI-2020-11638 CVE-2020-14803 · GHSA-5frm-fh7j-wpfx

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

LOW 36

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0316 Published 2020-10-21 Fixed

TI-2020-11633 CVE-2020-14798 · GHSA-xc9p-gjc5-8c5x

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 20

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.02717 Published 2020-10-21 No fix listed

TI-2020-11632 CVE-2020-14797 · GHSA-wgvf-93f7-fwc3

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 22

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02196 Published 2020-10-21 Fixed

TI-2020-11631 CVE-2020-14796 · GHSA-xvc4-7pr5-9qg4

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 20

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.02493 Published 2020-10-21 Fixed

TI-2020-11627 CVE-2020-14792 · GHSA-gx8h-w6f7-x7qf

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

LOW 24

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.0223 Published 2020-10-21 Fixed

TI-2019-13284 CVE-2019-18276 · GHSA-jcxc-5f87-vq5m

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.

HIGH 69

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02608 Published 2019-11-28 Partial fix CWE-273

TI-2019-03890 CVE-2019-5482 · GHSA-35cc-32cj-vr6g

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

HIGH 66

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17939 Published 2019-09-16 Partial fix CWE-122

TI-2019-03851 CVE-2019-5443 · GHSA-79v3-h2vf-vcg6

Code injection in curl

LOW 35

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0069 Published 2019-07-02 No fix listed CWE-94

TI-2019-03903 CVE-2019-5495 · GHSA-h74h-p7p2-p27g

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped…

LOW 36

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01429 Published 2019-05-10 Fixed in 9.5 CWE-254

TI-2019-03902 CVE-2019-5494 · GHSA-8mg8-7wvf-hrwj

Cleartext transmission of sensitive information in NetApp OnCommand Unified Manager 7-Mode

LOW 34

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00703 Published 2019-05-10 Fixed in 5.2.3 CWE-319

TI-2019-00184 CVE-2019-0211 · GHSA-w9rc-q752-88hf

Use after free in Apache HTTP Server

CRITICAL 93KEV

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) cou…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.65005 Published 2019-04-08 Partial fix CWE-416

TI-2019-00190 CVE-2019-0217 · GHSA-q29r-xr2f-g7j5

Race condition in Apache HTTP Server

MEDIUM 49

In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing config…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.16355 Published 2019-04-08 Partial fix CWE-362

TI-2019-07275 CVE-2019-9898 · GHSA-8px9-pwgj-xj9f

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.

MEDIUM 49

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03937 Published 2019-03-21 No fix listed CWE-330

TI-2019-07274 CVE-2019-9897 · GHSA-8428-8q8v-98pj

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.

LOW 38

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02939 Published 2019-03-21 No fix listed

TI-2019-07271 CVE-2019-9894 · GHSA-pwmv-rrj5-fgmx

A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.

LOW 38

A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02447 Published 2019-03-21 No fix listed CWE-320

TI-2019-01190 CVE-2019-1559 · GHSA-9ccq-7hvh-cv7p

0-byte record padding oracle

MEDIUM 43

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte r…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.17139 Published 2019-02-27 Partial fix CWE-203

TI-2019-02094 CVE-2019-2539 · GHSA-fg66-6ff6-x8xr

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02703 Published 2019-01-16 Fixed

TI-2019-02092 CVE-2019-2537 · GHSA-cxvc-c563-9w9g

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.04266 Published 2019-01-16 Partial fix

TI-2019-02091 CVE-2019-2536 · GHSA-jw5v-gf5h-hgh6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 23

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging).

CVSS 3.1MEDIUM 5.0 Local High privileges User interaction EPSS 0.00413 Published 2019-01-16 Fixed

TI-2019-02090 CVE-2019-2535 · GHSA-3wxm-9mxw-85q8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 19

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options).

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00404 Published 2019-01-16 Fixed

TI-2019-02089 CVE-2019-2534 · GHSA-h666-h4f3-f2vp

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0203 Published 2019-01-16 Partial fix

TI-2019-02088 CVE-2019-2533 · GHSA-4jv4-m99j-v5mh

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 32

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01615 Published 2019-01-16 Fixed

TI-2019-02087 CVE-2019-2532 · GHSA-6ww5-867h-w269

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03144 Published 2019-01-16 Partial fix

TI-2019-02086 CVE-2019-2531 · GHSA-8h34-5vpq-jhv7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03119 Published 2019-01-16 Partial fix

Vulnerabilities

Filters