Skip to contentNetapp H500s Firmware vulnerabilities
- ami megarac spx, megarac-spx, megarac sp-x +9 more +11 moreRedfish Authentication BypassCVE-2024-54085In KEVPublic exploitEPSS 60.7%10.0 Critical
- gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 morelibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in...CVE-2025-24928Fix available7.8 High
- gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 morelibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in...CVE-2024-56171Fix available7.8 High
- curl, netapp bootstrap os, h300s firmware +23 more +25 moreeventfd double closeCVE-2025-0665Fix available7.0 High
- curl, netapp bootstrap os, element software +32 more +34 morenetrc and default credential leakCVE-2025-0167Fix available3.4 Low
- debian linux, netapp 500f firmware, 8300 firmware +27 more +29 moreTiming side-channel in ECDSA signature computationCVE-2024-13176Public exploitFix available4.6 Medium
- curl, netapp bootstrap os, h300s firmware +29 more +31 morenetrc and redirect credential leakCVE-2024-11053Fix available3.4 Low
- libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 moreAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...CVE-2024-50602Public exploitFix available5.9 Medium
- debian linux, netapp 500f firmware, a250 firmware +30 more +32 moreLow-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143Fix availableEPSS 12.5%8.8 High
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLSCVE-2024-8096Fix available6.5 Medium
- openssl, netapp bootstrap os, brocade fabric operating system +9 more +11 moreRFC7250 handshakes with unauthenticated servers don't abort as expectedCVE-2024-12797Fix available7.4 High
- netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 morePossible denial of service in X.509 name checksCVE-2024-6119Fix availableEPSS 66.6%7.5 High
- gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 moreIn libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can...CVE-2024-40896Fix available9.1 Critical
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overreadCVE-2024-5535Public exploitFix available9.1 Critical
- linux, linux kernel, netapp converged systems advisor agent +8 more +10 moreNFSD: Fix nfsd4_encode_fattr4() crasherCVE-2024-36958Fix available9.8 Critical
- openssl, debian linux, netapp 500f firmware +32 more +34 moreUse After Free with SSL_free_buffersCVE-2024-4741Fix available9.8 Critical
- openssl, netapp 500f firmware, 8300 firmware +19 more +21 moreExcessive time spent checking DSA keys and parametersCVE-2024-4603Fix available5.3 Medium
- gnu glibc, debian linux, netapp element software +11 more +13 morenscd: netgroup cache assumes NSS callback uses in-buffer stringsCVE-2024-33602Fix available7.4 High
- gnu glibc, debian linux, netapp h300s firmware +11 more +13 morenscd: netgroup cache may terminate daemon on memory allocation failureCVE-2024-33601Fix available7.3 High
- gnu glibc, debian linux, netapp active iq unified manager +12 more +14 morenscd: Null pointer crashes after notfound responseCVE-2024-33600Fix available5.9 Medium
- gnu glibc, debian linux, netapp h300s firmware +8 more +10 morenscd: Stack-based buffer overflow in netgroup cacheCVE-2024-33599Fix available8.1 High
- debian linux, gnu glibc, netapp active iq unified manager +13 more +15 moreThe iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer...CVE-2024-2961Public exploitFix availableEPSS 88.3%7.3 High
- openssl, debian linux, netapp 500f firmware +79 more +81 moreUnbounded memory growth with session handling in TLSv1.3CVE-2024-2511Fix availableEPSS 59.3%5.9 Medium
- curl, curl libcurl, apple macos +10 more +12 moreTLS certificate check bypass with mbedTLSCVE-2024-2466Fix available6.5 Medium
- curl, apple macos, netapp active iq unified manager +14 more +16 moreQUIC certificate check bypass with wolfSSLCVE-2024-2379Fix available6.3 Medium
- curl, apple macos, fedoraproject fedora +16 more +18 moreHTTP/2 push headers memory-leakCVE-2024-2398Fix availableEPSS 36.1%8.6 High
- curl, apple macos, fedoraproject fedora +12 more +14 moreUsage of disabled protocolCVE-2024-2004Fix available3.5 Low
- libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +17 more +19 morelibexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of...CVE-2024-28757Public exploitFix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +15 more +17 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2024-1086In KEVPublic exploitFix availableEPSS 28.1%7.8 High
- openssl, netapp 500f firmware, 8300 firmware +31 more +33 moreExcessive time spent checking invalid RSA public keysCVE-2023-6237Fix available5.9 Medium
- openssl, debian linux, netapp h300s firmware +9 more +11 moreIncorrect cipher key & IV length processingCVE-2023-5363Fix available7.5 High
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreextract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.2 fails to unpin pages in...CVE-2023-40791Fix available6.3 Medium
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- isc bind, bind 9, debian linux +6 more +8 morenamed may terminate unexpectedly under high DNS-over-TLS query loadCVE-2023-4236Fix available7.5 High
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entryCVE-2023-4273Fix available6.0 Medium
- linux kernel, fedora, netapp h300s firmware +8 more +10 moreSession null pointer dereference denial-of-service vulnerabilityCVE-2023-32252Fix available7.5 High
- isc bind, bind 9, netapp active iq unified manager +5 more +7 moreMalformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabledCVE-2023-2829Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 moreExceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0CVE-2023-2911Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceededCVE-2023-2828Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...CVE-2023-3212Fix available4.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreAn issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before...CVE-2023-35788Public exploitFix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreA use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs...CVE-2023-3111Fix available7.8 High
- openldap, apple macos, netapp active iq unified manager +11 more +13 moreA vulnerability was found in openldap. This security flaw causes a null pointer dereference in...CVE-2023-2953Fix available7.5 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreThere is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the...CVE-2023-2898Fix available4.7 Medium
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreThe Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd...CVE-2023-33250Fix available4.4 Medium
- haxx curl, apple macos, netapp clustered data ontap +5 more +7 moreA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...CVE-2023-28320Fix available5.9 Medium
- haxx curl, apple macos, fedoraproject fedora +6 more +8 moreAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...CVE-2023-28322Fix available3.7 Low
- haxx curl, apple macos, debian linux +7 more +9 moreAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...CVE-2023-28321Fix available5.9 Medium
- Show olderLoading…