Netapp Cloud Backup vulnerabilities

• f5 nginx api connectivity manager, nginx instance manager, nginx security monitoring +2 more +4 more NGINX Management Suite vulnerability CVE-2023-28656 8.1 HighMay 3, 2023
• intel active management technology firmware, netapp cloud backup +1 more Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an... CVE-2021-33068 6.5 MediumFebruary 9, 2022
• intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +677 more +679 more Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated... CVE-2021-0156 7.8 HighFebruary 9, 2022
• intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +678 more +680 more Improper access control in the firmware for some Intel(R) Processors may allow a privileged user... CVE-2021-0124 6.6 MediumFebruary 9, 2022
• intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +678 more +680 more Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to... CVE-2021-0118 6.7 MediumFebruary 9, 2022
• intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +678 more +680 more Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user... CVE-2021-0125 6.6 MediumFebruary 9, 2022
• intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +678 more +680 more Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user... CVE-2021-0119 6.2 MediumFebruary 9, 2022
• intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +678 more +680 more Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to... CVE-2021-0116 7.8 HighFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user... CVE-2021-0107 6.7 MediumFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to... CVE-2021-0115 6.7 MediumFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user... CVE-2021-0111 6.7 MediumFebruary 9, 2022
• intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +678 more +680 more Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to... CVE-2021-0117 7.8 HighFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more Insufficient control flow management in the firmware for some Intel(R) Processors may allow a... CVE-2021-0103 6.7 MediumFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more Improper access control in the firmware for some Intel(R) Processors may allow a privileged user... CVE-2021-0092 4.4 MediumFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated... CVE-2021-0091 7.8 HighFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged... CVE-2021-0093 4.4 MediumFebruary 9, 2022
• intel 11th generation core series firmware, atom c3000 series firmware, atom c610 series firmware +13 more +15 more Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions... CVE-2021-0060 6.6 MediumFebruary 9, 2022
• intel atom c3308, atom c3336, atom c3338 +678 more +680 more Insufficient control flow management in the firmware for some Intel(R) Processors may allow an... CVE-2021-0099 7.8 HighFebruary 9, 2022
• apache http server, apple mac os x, macos +10 more +12 more Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier CVE-2021-44790 Public exploitFix available EPSS 96.8% 9.8 CriticalDecember 20, 2021
• openssl, netapp 500f firmware, a250 firmware +13 more +15 more Invalid handling of X509_verify_cert() internal errors in libssl CVE-2021-4044 Public exploitFix available EPSS 50.1% 7.5 HighDecember 14, 2021
• linux kernel, netapp cloud backup, h300e firmware +7 more +9 more The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an... CVE-2018-25020 Fix available 7.8 HighDecember 8, 2021
• mozilla nss, nss esr, netapp cloud backup +7 more +9 more NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... CVE-2021-43527 Fix available EPSS 17.6% 9.8 CriticalDecember 1, 2021
• debian linux, linux kernel, fedoraproject fedora +8 more +10 more In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia... CVE-2021-43975 Fix available 6.7 MediumNovember 17, 2021
• debian linux, linux kernel, fedoraproject fedora +12 more +14 more In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb... CVE-2021-43976 Fix available 4.6 MediumNovember 17, 2021
• busybox, fedoraproject fedora, netapp cloud backup +9 more +11 more An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and... CVE-2021-42377 Fix available 9.8 CriticalNovember 15, 2021
• busybox, fedoraproject fedora, netapp cloud backup +9 more +11 more A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a... CVE-2021-42376 Fix available 5.5 MediumNovember 15, 2021
• busybox, fedoraproject fedora, netapp cloud backup +9 more +11 more An incorrect handling of a special element in Busybox's ash applet leads to denial of service... CVE-2021-42375 Fix available 5.5 MediumNovember 15, 2021
• busybox, fedoraproject fedora, netapp cloud backup +9 more +11 more An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of... CVE-2021-42374 Fix available 5.3 MediumNovember 15, 2021
• busybox, fedoraproject fedora, netapp cloud backup +9 more +11 more A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name... CVE-2021-42373 Fix available 5.5 MediumNovember 15, 2021
• isc bind, debian linux, fedoraproject fedora +13 more +15 more Lame cache can be abused to severely degrade resolver performance CVE-2021-25219 Fix available EPSS 11.2% 5.3 MediumOctober 27, 2021
• linux kernel, netapp cloud backup, h300e firmware +8 more +10 more An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the... CVE-2021-42252 Fix available 7.8 HighOctober 11, 2021
• apache http server, fedoraproject fedora, netapp cloud backup +3 more +5 more Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) CVE-2021-42013 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalOctober 7, 2021
• apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 more Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalOctober 5, 2021
• apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 more null pointer dereference in h2 fuzzing CVE-2021-41524 Fix available EPSS 25.8% 7.5 HighOctober 5, 2021
• debian linux, linux kernel, fedoraproject fedora +12 more +14 more prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel through 5.14.9 allows... CVE-2021-41864 Fix available 7.8 HighOctober 1, 2021
• debian linux, linux kernel, netapp cloud backup +8 more +10 more arch/mips/net/bpf_jit.c in the Linux kernel through 5.14.6 can generate undesirable machine code... CVE-2021-38300 Fix available 7.8 HighSeptember 20, 2021
• debian linux, linux kernel, fedoraproject fedora +10 more +12 more loop_rw_iter in fs/io_uring.c in the Linux kernel through 5.14.6 allows local users to gain... CVE-2021-41073 Public exploitFix available 7.8 HighSeptember 19, 2021
• apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF CVE-2021-40438 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalSeptember 16, 2021
• apache http server, debian linux, fedoraproject fedora +7 more +9 more ap_escape_quotes buffer overflow CVE-2021-39275 Fix available EPSS 39.4% 9.8 CriticalSeptember 16, 2021
• apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 more mod_proxy_uwsgi out of bound read CVE-2021-36160 Fix available EPSS 63.7% 7.5 HighSeptember 16, 2021
• apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 more NULL pointer dereference in httpd core CVE-2021-34798 Fix available EPSS 64.5% 7.5 HighSeptember 16, 2021
• haxx curl, apple macos, debian linux +26 more +28 more When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using... CVE-2021-22947 Fix available 5.9 MediumSeptember 15, 2021
• haxx curl, apple macos, debian linux +29 more +31 more A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking... CVE-2021-22946 Fix available 7.5 HighSeptember 15, 2021
• haxx libcurl, apple macos, debian linux +17 more +19 more When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances... CVE-2021-22945 Fix available 9.1 CriticalSeptember 15, 2021
• libssh, debian linux, fedoraproject fedora +4 more +6 more A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two... CVE-2021-3634 Fix available 6.5 MediumAugust 26, 2021
• debian linux, netapp cloud backup, openidc mod auth openidc +2 more Format string bug in the Redis cache implementation CVE-2021-32785 Fix available 5.3 MediumJuly 22, 2021
• haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 more When curl is instructed to get content using the metalink feature, and a user name and password... CVE-2021-22923 Fix available 5.3 MediumJuly 21, 2021
• haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 more When curl is instructed to download content using the metalink feature, thecontents is verified... CVE-2021-22922 Fix available 6.5 MediumJuly 21, 2021
• haxx curl, apple mac os x, macos +20 more +22 more curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This... CVE-2021-22925 Fix available 5.3 MediumJuly 21, 2021
• haxx libcurl, debian linux, fedoraproject fedora +33 more +35 more libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... CVE-2021-22924 Public exploitFix available 3.7 LowJuly 21, 2021
• Show olderLoading…