Storage Automation Store vulnerabilities | LiveThreat CVE Feed

Product

Storage Automation Store

by Netapp · last CVE Apr 18, 2019

113

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities113 In the news0 Timeline

Severity mix

Critical 15High 24Medium 70Low 4

Severity

All severities113 Critical15 High24 Medium70 Low4

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Storage Automation Store to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-3073	6.5	2%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified
CVE-2018-3070	6.5	4%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump) Affected: All versions, or not specified
CVE-2018-3065	6.5	4%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: All versions, or not specified
CVE-2018-3060	6.5	3%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified
CVE-2018-17082	6.1	4%	Sep 16	The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request,… Affected: All versions, or not specified
CVE-2018-10547	6.1	3%	Apr 29	An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5 Affected: All versions, or not specified
CVE-2019-1559	5.9	17%	Feb 27	0-byte record padding oracle Affected: All versions, or not specified
CVE-2018-0734	5.9	12%	Oct 30	Timing attack against DSA Affected: All versions, or not specified
CVE-2018-3144	5.9	4%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: All versions, or not specified
CVE-2018-11763	5.9	51%	Sep 25	In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout… Affected: All versions, or not specified
CVE-2018-1302	5.9	13%	Mar 26	When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory Affected: All versions, or not specified
CVE-2018-1301	5.9	15%	Mar 26	A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP… Affected: All versions, or not specified
CVE-2019-2436	5.5	2%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified
CVE-2018-3247	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: All versions, or not specified
CVE-2018-3187	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified
CVE-2018-3185	5.5	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified
CVE-2018-14851	5.5	4%	Aug 2	exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial… Affected: All versions, or not specified
CVE-2018-8026	5.5	9%	Jul 5	This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred… Affected: All versions, or not specified
CVE-2018-2812	5.5	2%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified
CVE-2018-17189	5.3	20%	Jan 30	In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server… Affected: All versions, or not specified
CVE-2018-20685	5.3	4%	Jan 10	In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of Affected: All versions, or not specified
CVE-2018-3074	5.3	2%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: All versions, or not specified
CVE-2018-3062	5.3	3%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) Affected: All versions, or not specified
CVE-2018-1283	5.3	10%	Mar 26	In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their… Affected: All versions, or not specified
CVE-2019-2536	5.0	0%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: All versions, or not specified
CVE-2018-3081	5.0	3%	Jul 18	Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs) Affected: All versions, or not specified
CVE-2019-2537	4.9	4%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified
CVE-2019-2420	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified
CVE-2019-2539	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection) Affected: All versions, or not specified
CVE-2019-2530	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: All versions, or not specified
CVE-2019-2532	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: All versions, or not specified
CVE-2019-2531	4.9	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified
CVE-2018-3285	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows) Affected: All versions, or not specified
CVE-2018-3280	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON) Affected: All versions, or not specified
CVE-2018-3279	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: All versions, or not specified
CVE-2018-3278	4.9	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR) Affected: All versions, or not specified
CVE-2018-3276	4.9	3%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) Affected: All versions, or not specified
CVE-2018-3212	4.9	2%	Oct 17	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema) Affected: All versions, or not specified
CVE-2018-3080	4.9	2%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified
CVE-2018-3079	4.9	2%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: All versions, or not specified
CVE-2018-3078	4.9	2%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified
CVE-2018-3077	4.9	3%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified
CVE-2018-3075	4.9	2%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: All versions, or not specified
CVE-2018-3071	4.9	3%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log) Affected: All versions, or not specified
CVE-2018-3067	4.9	2%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: All versions, or not specified
CVE-2018-3061	4.9	3%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: All versions, or not specified
CVE-2018-3054	4.9	3%	Jul 18	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: All versions, or not specified
CVE-2018-2846	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema) Affected: All versions, or not specified
CVE-2018-2839	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: All versions, or not specified
CVE-2018-2818	4.9	3%	Apr 19	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: All versions, or not specified