Skip to contentNetapp Element Software vulnerabilities
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714Fix available7.5 High
- debian linux, linux kernel, netapp element software +3 more +5 morefs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering,...CVE-2021-38199Fix available6.5 Medium
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morenet/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of...CVE-2021-38201Fix available7.5 High
- linux kernel, netapp element software, hci bootstrap os +3 more +5 morefs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial...CVE-2021-38202Fix available7.5 High
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morebtrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock)...CVE-2021-38203Fix available5.5 Medium
- debian linux, linux kernel, netapp element software +4 more +6 moreIn drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can...CVE-2021-38160Fix availableDisputed7.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2021-28169Fix availableEPSS 78.5%5.3 Medium
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 moreElement Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework...CVE-2021-269879.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headersCVE-2020-27223Public exploitFix availableEPSS 78.0%5.2 Medium
- linux kernel, netapp cloud backup, element software +4 more +6 moreAn issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5....CVE-2020-29368Fix available7.0 High
- ntp, fujitsu m10-1 firmware, m10-4 firmware +22 more +24 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...CVE-2020-13817Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...CVE-2020-12653Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreIn the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a...CVE-2020-11884Fix available7.0 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- debian linux, linux kernel, broadcom fabric operating system +15 more +17 moreAn issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is...CVE-2019-18683Public exploitFix available7.0 High
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...CVE-2019-17498Public exploitFix available8.1 High
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...CVE-2019-14287Public exploitFix availableEPSS 63.8%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moredrivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer...CVE-2019-15098Fix available4.6 Medium
- linux kernel, netapp active iq performance analytics services, active iq unified manager +3 more +5 moreAn issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers...CVE-2018-20855Fix available3.3 Low
- apache zookeeper, activemq, drill +7 more +9 moreAccess control bypass in Apache ZooKeeperCVE-2019-0201Fix available5.9 Medium
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypassCVE-2019-11068Fix available9.8 Critical
- linux kernel, netapp element software management node +1 moreThe hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows...CVE-2018-20449Fix available5.5 Medium
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- gnu binutils, canonical ubuntu linux, f5 traffix signaling delivery controller +1 more +3 moreAn issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in...CVE-2019-9077Fix available7.8 High
- gnu binutils, netapp element software management +1 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-90765.5 Medium
- gnu binutils, canonical ubuntu linux, f5 traffix signaling delivery controller +1 more +3 moreAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based...CVE-2019-9070Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreThe KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.CVE-2019-7222Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.CVE-2019-7221Fix available7.8 High
- canonical ubuntu linux, debian advanced package tool, linux +3 more +5 moreIncorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and...CVE-2019-3462Public exploitFix availableEPSS 14.6%8.1 High
- openbsd openssh, netapp element software, ontap select deploy +7 more +9 moreIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...CVE-2019-6110Public exploitEPSS 24.9%6.8 Medium
- isc bind, bind 9, netapp data ontap edge +2 more +4 moreAn error processing RPZ rules can cause named to loop endlessly after handling a queryCVE-2017-3140Fix availableEPSS 12.2%3.7 Low
- systemd, canonical ubuntu linux, netapp active iq performance analytics services +2 more +4 moreIt was discovered systemd does not correctly check the content of PIDFile files before using it...CVE-2018-16888Fix available4.4 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- systemd, canonical ubuntu linux, debian linux +18 more +20 moreAn out of bounds read was discovered in systemd-journald in the way it parses log messages that...CVE-2018-16866Fix available4.3 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...CVE-2018-20685Fix available5.3 Medium
- linux kernel, netapp active iq performance analytics services, element software management node +2 moreThe mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local...CVE-2019-5489Public exploitFix available5.5 Medium
- debian linux, linux kernel, netapp active iq performance analytics services +1 more +3 moreThe function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8...CVE-2018-19985Fix available4.6 Medium
- openssl, canonical ubuntu linux, debian linux +19 more +21 moreTiming attack against ECDSA signature generationCVE-2018-0735Fix available5.9 Medium
- linux kernel, netapp active iq performance analytics services, element software +1 more +3 moreAn issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs...CVE-2018-16597Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreAn issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm...CVE-2018-17182Public exploitFix available7.8 High
- intel converged security management engine firmware, intel corporation converged security management engine (intel csme), netapp element software management node +2 moreLogic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute...CVE-2018-36278.2 High
- Show moreLoading…