Vulnerabilities (CVE)

Vendor filter

Netapp Subscribe

Product filter

Snap Creator Framework Subscribe

Filter

8 total CVE
CVE Vendors Products Updated CVSS
CVE-2018-18311 7 Perl, Canonical, Debian and 4 more 16 Perl, Ubuntu Linux, Debian Linux and 13 more 2019-04-16 7.5
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVE-2018-11784 5 Apache, Netapp, Canonical and 2 more 10 Tomcat, Snap Creator Framework, Ubuntu Linux and 7 more 2019-04-15 4.3
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to...
CVE-2018-12538 2 Eclipse, Netapp 10 Jetty, E-series Santricity Management Plug-ins, E-series Santricity Web Services Proxy and 7 more 2019-03-21 6.5
In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete...
CVE-2018-18314 5 Perl, Canonical, Debian and 2 more 7 Perl, Ubuntu Linux, Debian Linux and 4 more 2019-02-26 7.5
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVE-2018-18313 5 Perl, Canonical, Debian and 2 more 7 Perl, Ubuntu Linux, Debian Linux and 4 more 2019-02-26 6.4
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.
CVE-2018-18312 5 Perl, Canonical, Debian and 2 more 7 Perl, Ubuntu Linux, Debian Linux and 4 more 2019-02-26 7.5
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVE-2016-5372 1 Netapp 1 Snap Creator Framework 2017-11-16 6.8
Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
CVE-2016-7172 1 Netapp 1 Snap Creator Framework 2017-07-27 5.0
NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user.