Skip to contentNetapp H500s vulnerabilities
- linux kernel, netapp active iq unified manager, h300s firmware +5 more +7 moreThe Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer...CVE-2022-43945Fix available7.5 High
- haxx curl, apple macos, netapp clustered data ontap +8 more +10 morecurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...CVE-2022-35260Fix available6.5 Medium
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...CVE-2022-42915Fix available8.1 High
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...CVE-2022-32221Fix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 moreIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared...CVE-2022-43680Public exploitFix available7.5 High
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can...CVE-2022-40304Fix available7.8 High
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with...CVE-2022-40303Fix availableEPSS 41.4%7.5 High
- debian linux, linux kernel, netapp active iq unified manager +5 more +7 moreLinux Kernel BPF inode.c nilfs_new_inode use after freeCVE-2022-3649Fix available3.1 Low
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreLinux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after freeCVE-2022-3564Public exploitFix available5.5 Medium
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel IPsec nfp_cppcore.c area_cache_get use after freeCVE-2022-3545Fix available5.5 Medium
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the...CVE-2022-3202Fix available7.1 High
- linux kernel, netapp h300s firmware, h410c firmware +4 more +6 moreA flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit...CVE-2022-2964Fix available7.8 High
- gnu glibc, netapp h300s firmware, h410c firmware +4 more +6 moreAn issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a...CVE-2022-39046Fix available7.5 High
- haxx curl, apple macos, debian linux +14 more +16 moreWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...CVE-2022-35252Fix available3.7 Low
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreA use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user...CVE-2022-2961Fix available7.0 High
- systemd project systemd, netapp active iq unified manager, h300s firmware +3 more +5 moreA use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io()...CVE-2022-2526Fix available9.8 Critical
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the...CVE-2022-2938Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host...CVE-2022-2873Fix available5.5 Medium
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- linux kernel, netapp h300s firmware, h410c firmware +15 more +17 moreThe Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (...CVE-2022-36123Fix available7.8 High
- debian linux, linux kernel, netapp a700s firmware +22 more +24 moreAn issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm...CVE-2022-36879Fix available5.5 Medium
- linux kernel, netapp h300s firmware, h410c firmware +4 more +6 moreUse-after-free in io_uring ad work_flags in Linux KernelCVE-2022-2327Fix available7.5 High
- jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 morejQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text labelCVE-2022-31160Public exploitFix available6.1 Medium
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreThere are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of...CVE-2022-2318Fix available5.5 Medium
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytesCVE-2022-2097Public exploitFix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...CVE-2022-34918Public exploitFix available7.8 High
- openssl, netapp h300s firmware, h410c firmware +8 more +10 moreRSA implementation bug in AVX512IFMA instructionsCVE-2022-2274Public exploitFix availableEPSS 48.2%9.8 Critical
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...CVE-2022-32208Fix available5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...CVE-2022-32207Fix availableEPSS 12.3%9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...CVE-2022-32206Fix availableEPSS 36.3%6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...CVE-2022-32205Fix availableEPSS 31.5%4.3 Medium
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injectionCVE-2022-2068Fix availableEPSS 96.4%7.3 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreCVE-2022-1973 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1973Fix available7.1 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 morenet/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to...CVE-2022-32250Public exploitFix available7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets...CVE-2022-1786Fix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a...CVE-2022-1652Fix available7.8 High
- linux kernel, netapp h300e firmware, h300s firmware +7 more +9 moreA flaw use after free in the Linux kernel pipes functionality was found in the way user do some...CVE-2022-1882Fix available7.8 High
- linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 moreAn issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock...CVE-2022-1678Fix available5.9 Medium
- debian linux, linux kernel, netapp h300e firmware +7 more +9 moreA flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can...CVE-2022-1734Fix available7.0 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA use after free in the Linux kernel File System notify functionality was found in the way user...CVE-2022-1998Fix available7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the...CVE-2022-1671Fix available7.1 High
- isc bind, bind9, netapp h300s firmware +4 more +6 moreDestroying a TLS session early causes assertion failureCVE-2022-1183Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...CVE-2022-29581Public exploitFix available7.8 High
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way...CVE-2022-1679Public exploitFix available7.8 High
- pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1587Fix available9.1 Critical
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1586Fix available9.1 Critical
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to...CVE-2022-1116Fix available7.8 High
- debian linux, linux kernel, netapp 8300 firmware +10 more +12 moreThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...CVE-2022-30594Public exploitFix available7.8 High
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 Medium
- Show moreLoading…