Netapp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-4341 1Netapp 1Clustered Data Ontap May 13, 2026 Feb 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors.
CVE-2016-3063 1Netapp 1Oncommand System Manager May 13, 2026 Feb 7, 2017 N/A· v4 7.5 HIGH· v3 4.4 MEDIUM· v2 Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors.
CVE-2016-1894 1Netapp 1Oncommand Workflow Automation May 13, 2026 Feb 7, 2017 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors.
CVE-2016-1502 1Netapp 1Snapcenter Server May 13, 2026 Feb 7, 2017 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.
CVE-2015-8544 1Netapp 1Snapdrive May 13, 2026 Feb 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 before 7.1.3P1 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2015-8322 1Netapp 1Data Ontap May 13, 2026 Feb 7, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVE-2016-10165 6Canonical DebianLittlecms+3 more 19Active Iq Unified Manager Debian LinuxE Series Santricity Management+16 more Oct 15, 2026 Feb 3, 2017 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo...Show more The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.Show less
CVE-2017-5600 1Netapp 1Oncommand Insight May 13, 2026 Feb 2, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account.
CVE-2016-2518 7Debian FreebsdNetapp+4 more 17Clustered Data Ontap Communications User Data RepositoryData Ontap+14 more May 13, 2026 Jan 30, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
CVE-2015-7977 8Canonical DebianFedoraproject+5 more 10Clustered Data Ontap Debian LinuxFedora+7 more May 13, 2026 Jan 30, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
CVE-2015-7973 5Canonical FreebsdNetapp+2 more 7Clustered Data Ontap FreebsdNtp+4 more May 13, 2026 Jan 30, 2017 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
CVE-2016-10160 3Debian NetappPhp 3Clustered Data Ontap Debian LinuxPhp May 13, 2026 Jan 24, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary...Show more Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.Show less
CVE-2016-9131 4Debian IscNetapp+1 more 12Bind Data Ontap EdgeDebian Linux+9 more May 6, 2026 Jan 12, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE AN...Show more named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.Show less
CVE-2016-6820 1Netapp 1Metrocluster Tiebreaker May 6, 2026 Jan 11, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user.
CVE-2015-8020 1Netapp 1Clustered Data Ontap May 6, 2026 Jan 11, 2017 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure.
CVE-2016-7480 2Netapp Php 2Clustered Data Ontap Php May 6, 2026 Jan 11, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service...Show more The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data.Show less
CVE-2017-5340 2Netapp Php 2Clustered Data Ontap Php May 6, 2026 Jan 11, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer ov...Show more Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.Show less
CVE-2015-7848 2Netapp Ntp 6Clustered Data Ontap Data Ontap Operating In 7 ModeNtp+3 more May 23, 2025 Jan 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authenticati...Show more An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.Show less
CVE-2016-7172 1Netapp 1Snap Creator Framework May 6, 2026 Dec 21, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user.
CVE-2016-7171 1Netapp 1Netapp Plug In May 6, 2026 Dec 5, 2016 N/A· v4 5.6 MEDIUM· v3 6.8 MEDIUM· v2 NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation.

Previous 1...122 123 124125126 Next