Skip to contentNetapp Clustered Data Ontap vulnerabilities
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- intel xeon bronze 3104 firmware, xeon bronze 3106 firmware, xeon bronze 3204 firmware +134 more +136 moreImproper input validation in BIOS firmware for some Intel(R) Processors may allow an...CVE-2020-05907.8 High
- apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 moreApache CXF Reflected XSS in the services listing page via the styleSheetPathCVE-2020-13954Fix availableEPSS 40.9%6.1 Medium
- debian linux, fedoraproject fedora, intel microcode +14 more +16 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...CVE-2020-8698Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel microcode +4 more +6 moreImproper removal of sensitive information before storage or transfer in some Intel(R) Processors...CVE-2020-8696Fix available5.5 Medium
- netapp clustered data ontapClustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows...CVE-2020-85797.5 High
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- freebsd, omniosce omnios, openindiana +1 more +3 morebhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and...CVE-2020-247188.2 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a...CVE-2020-85765.4 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- pcre, apple macos, gitlab +12 more +14 morelibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.CVE-2020-14155Fix available5.3 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3...CVE-2020-74566.8 Medium
- ntp, fujitsu m10-1 firmware, m10-4 firmware +22 more +24 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...CVE-2020-13817Fix available5.9 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...CVE-2019-56149.8 Critical
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...CVE-2019-158749.8 Critical
- ntp, debian linux, netapp all flash fabric-attached storage 8300 firmware +14 more +16 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block...CVE-2020-11868Fix available5.9 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...CVE-2019-19956Fix available7.5 High
- netapp clustered data ontapClustered Data ONTAP versions 9.2 through 9.6 are susceptible to a vulnerability which allows an...CVE-2019-55087.5 High
- netapp clustered data ontapClustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain...CVE-2019-55065.9 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before...CVE-2019-56127.5 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before...CVE-2019-56089.8 Critical
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before...CVE-2019-56117.5 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before...CVE-2019-56107.5 High
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- netapp aff a700s baseboard management controller, aff a700s firmware, clustered data ontap +2 moreNetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were...CVE-2019-54979.8 Critical
- xmlsoft libxslt, apple icloud, iphone os +22 more +24 morelibxslt Type Confusion vulnerability that affects NokogiriCVE-2019-13118Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8....CVE-2019-11815Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreAn issue was discovered in the Linux kernel before 4.20. There is a race condition in...CVE-2018-20836Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and...CVE-2019-3900Fix available6.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreA flaw was found in the Linux kernel's vfio interface implementation that permits violation of...CVE-2019-3882Fix available4.7 Medium
- debian linux, linux kernel, netapp active iq +7 more +9 moreThe Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0...CVE-2019-11486Fix available7.0 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- linux kernel, debian linux, netapp active iq unified manager for vmware vsphere +7 more +9 moreA race condition in perf_event_open() allows local attackers to leak sensitive data from setuid...CVE-2019-3901Fix available5.6 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- ntp, fedoraproject fedora, hpe hpux-ntp +3 more +5 moreNTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-8936Public exploitFix available7.5 High
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a...CVE-2019-54917.5 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- netapp clustered data ontapClustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows...CVE-2018-54984.4 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a...CVE-2018-54974.4 Medium
- Show moreLoading…