DO
Product
Data Ontap
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 18Medium 16Low 2
Watch
Add Data Ontap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7854 | 8.8 | Aug 7 | Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service… Affected: All versions, or not specified |
| CVE-2015-7849 | 8.8 | Aug 7 | Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of… Affected: All versions, or not specified |
| CVE-2016-5374 | 8.8 | Mar 1 | NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of… Affected: 9.0; 9.1 |
| CVE-2015-8322 | 8.8 | Feb 7 | NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors Affected: 8.3; 8.3.1 |
| CVE-2020-11868 | 7.5 | Apr 17 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP… Affected: All versions, or not specified |
| CVE-2019-5501 | 7.5 | Aug 2 | Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers Affected: before 8.2.5; 8.2.5; 8.2.5 |
| CVE-2019-5493 | 7.5 | Aug 2 | Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticated attacker Affected: before 8.2.5; 8.2.5; 8.2.5 |
| CVE-2019-8936 | 7.5 | May 15 | NTP through 4.2.8p12 has a NULL Pointer Dereference Affected: All versions, or not specified |
| CVE-2018-18066 | 7.5 | Oct 8 | snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to… Affected: All versions, or not specified |
| CVE-2016-10708 | 7.5 | Jan 21 | sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated… Affected: All versions, or not specified |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: All versions, or not specified |
| CVE-2015-7704 | 7.5 | Aug 7 | The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages Affected: All versions, or not specified |
| CVE-2015-7701 | 7.5 | Aug 7 | Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption) Affected: All versions, or not specified |
| CVE-2015-7692 | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) Affected: All versions, or not specified |
| CVE-2015-7691 | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing… Affected: All versions, or not specified |
| CVE-2015-7703 | 7.5 | Jul 24 | The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers… Affected: All versions, or not specified |
| CVE-2016-3400 | 7.5 | Jul 3 | NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via… Affected: 8.1; 8.2 |
| CVE-2020-13817 | 7.4 | Jun 4 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for… Affected: All versions, or not specified |
Showing 18