Vulnerabilidades de netapp manageability software development kit (CVE)

Registros CVE publicados para netapp manageability software development kit, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
7.8Alta
CVE-2024-56171
xmlsoft libxml2

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constrai…

1.2%EPSS
7.8Alta
CVE-2025-24928
xmlsoft libxml2

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

4.6Media
CVE-2024-13176

Timing side-channel in ECDSA signature computation

OpenSSL OpenSSL

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attack…