netapp cloud backup güvenlik açıkları (CVE)

netapp cloud backup için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

8 sonuç
9.8Kritik
CVE-2021-42013 KEV Fidye yazılımında kullanılıyor

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

Apache Software Foundation Apache HTTP Server

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories a…

100%EPSS
7.5Yüksek
CVE-2021-41773 KEV Fidye yazılımında kullanılıyor

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Apache Software Foundation Apache HTTP Server

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not…

100%EPSS
9.0Kritik
CVE-2021-40438 KEV Fidye yazılımında kullanılıyor

mod_proxy SSRF

Apache Software Foundation Apache HTTP Server

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

100%EPSS
7.8Yüksek
CVE-2021-3156 KEV

Sudo Heap-Based Buffer Overflow Vulnerability

sudo project sudo; fedoraproject fedora; debian debian linux; netapp active iq unified manager

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

100%EPSS
6.9Orta
CVE-2020-11023 KEV

Potential XSS vulnerability in jQuery

jquery jQuery

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

85%EPSS
7.8Yüksek
CVE-2019-2215 KEV

Android Kernel Use-After-Free Vulnerability

Android

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or…

72%EPSS
7.0Yüksek
CVE-2016-5195 KEV

Linux Kernel Race Condition Vulnerability

canonical ubuntu linux; linux linux kernel; redhat enterprise linux; redhat enterprise linux aus

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 201…

84%EPSS