Priority LOW 32
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01431 · Published 2020-10-21 · Fixed
Priority LOW 25
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01261 · Published 2020-10-21 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02365 · Published 2020-10-21 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02365 · Published 2020-10-21 · Partial fix
Priority LOW 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
CVSS 3.1LOW 2.2· Network · High privileges · No interaction · EPSS 0.01607 · Published 2020-10-21 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02384 · Published 2020-10-21 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0248 · Published 2020-10-21 · Partial fix
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02365 · Published 2020-10-21 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02365 · Published 2020-10-21 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02365 · Published 2020-10-21 · Fixed
Priority LOW 34
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02455 · Published 2020-10-21 · Fixed
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02365 · Published 2020-10-21 · Fixed
Priority LOW 34
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02455 · Published 2020-10-21 · Partial fix
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02434 · Published 2020-10-21 · Partial fix
Priority CRITICAL 88KEV
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
CVSS 3.1MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.84887 · Published 2020-04-29 · Partial fix · 3.5.0, 4.4.0 CWE-79
Priority LOW 26
NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00926 · Published 2019-03-04 · Fixed in 4.1 CWE-311
Priority LOW 23
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00676 · Published 2019-03-04 · Fixed in 4.0 CWE-79
Priority MEDIUM 61
The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20942 · Published 2018-05-16 · Partial fix · 9.0.9, 8.5.32 +2 CWE-1188
Priority LOW 34
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services.
CVSS 3.0HIGH 7.2· Network · No auth · No interaction · EPSS 0.01178 · Published 2018-03-06 · No fix listed CWE-287
Priority LOW 39
NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00561 · Published 2017-11-16 · No fix listed CWE-352
Priority MEDIUM 60
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.39919 · Published 2017-11-13 · Partial fix CWE-400
Priority LOW 38
NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01426 · Published 2017-08-07 · No fix listed CWE-284
Priority LOW 35
NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.01559 · Published 2017-02-07 · No fix listed CWE-287
THREATIST.IORead the docs