← Back

Solidfire & Hci Management Node

solidfire_&_hci_management_node

Vendor: Netapp • 103 CVEs

CVEs (103)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20839
2Netapp
Systemd Project
4Cn1610 Firmware
SnapprotectSolidfire & Hci Management Node+1 more
May 5, 2025
May 17, 2019
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGK...Show more
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.Show less
CVE-2018-20836
6Canonical
DebianF5+3 more
13Active Iq Unified Manager
Debian LinuxHci Compute Node+10 more
Nov 21, 2024
May 7, 2019
N/A· v4
8.1 HIGH· v3
9.3 HIGH· v2
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
CVE-2015-8960
2Ietf
Netapp
13Clustered Data Ontap Antivirus Connector
Data Ontap EdgeHost Agent+10 more
May 6, 2026
Sep 21, 2016
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in c...Show more
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.Show less