Skip to contentNetapp H500s Firmware vulnerabilities
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host...CVE-2022-2873Fix available5.5 Medium
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- linux kernel, netapp h300s firmware, h410c firmware +15 more +17 moreThe Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (...CVE-2022-36123Fix available7.8 High
- debian linux, linux kernel, netapp a700s firmware +22 more +24 moreAn issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm...CVE-2022-36879Fix available5.5 Medium
- linux kernel, netapp h300s firmware, h410c firmware +4 more +6 moreUse-after-free in io_uring ad work_flags in Linux KernelCVE-2022-2327Fix available7.5 High
- jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 morejQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text labelCVE-2022-31160Public exploitFix available6.1 Medium
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreThere are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of...CVE-2022-2318Fix available5.5 Medium
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytesCVE-2022-2097Public exploitFix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...CVE-2022-34918Public exploitFix available7.8 High
- openssl, netapp h300s firmware, h410c firmware +8 more +10 moreRSA implementation bug in AVX512IFMA instructionsCVE-2022-2274Public exploitFix availableEPSS 48.2%9.8 Critical
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...CVE-2022-32208Fix available5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...CVE-2022-32207Fix availableEPSS 12.3%9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...CVE-2022-32206Fix availableEPSS 36.3%6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...CVE-2022-32205Fix availableEPSS 31.5%4.3 Medium
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injectionCVE-2022-2068Fix availableEPSS 96.4%7.3 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreCVE-2022-1973 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1973Fix available7.1 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 morenet/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to...CVE-2022-32250Public exploitFix available7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets...CVE-2022-1786Fix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a...CVE-2022-1652Fix available7.8 High
- linux kernel, netapp h300e firmware, h300s firmware +7 more +9 moreA flaw use after free in the Linux kernel pipes functionality was found in the way user do some...CVE-2022-1882Fix available7.8 High
- linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 moreAn issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock...CVE-2022-1678Fix available5.9 Medium
- debian linux, linux kernel, netapp h300e firmware +7 more +9 moreA flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can...CVE-2022-1734Fix available7.0 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA use after free in the Linux kernel File System notify functionality was found in the way user...CVE-2022-1998Fix available7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the...CVE-2022-1671Fix available7.1 High
- isc bind, bind9, netapp h300s firmware +4 more +6 moreDestroying a TLS session early causes assertion failureCVE-2022-1183Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...CVE-2022-29581Public exploitFix available7.8 High
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way...CVE-2022-1679Public exploitFix available7.8 High
- pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1587Fix available9.1 Critical
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1586Fix available9.1 Critical
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to...CVE-2022-1116Fix available7.8 High
- debian linux, linux kernel, netapp 8300 firmware +10 more +12 moreThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...CVE-2022-30594Public exploitFix available7.8 High
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...CVE-2022-27778Fix available8.1 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...CVE-2022-27780Fix available7.5 High
- openldap, debian linux, netapp h300s firmware +8 more +10 moreIn OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...CVE-2022-29155Fix availableEPSS 64.5%9.8 Critical
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keysCVE-2022-1473Fix available7.5 High
- openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuiteCVE-2022-1434Fix available5.9 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreOCSP_basic_verify may incorrectly verify the response signing certificateCVE-2022-1343Fix available5.3 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c...CVE-2022-29968Public exploitFix available7.8 High
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel....CVE-2022-1353Fix available7.1 High
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...CVE-2022-27775Fix available7.5 High
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...CVE-2022-27774Fix available5.7 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...CVE-2022-22576Fix available8.1 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moredrivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free...CVE-2022-29156Fix available7.8 High
- debian linux, linux kernel, netapp h300e firmware +10 more +12 moreThe SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring...CVE-2022-28893Fix available7.8 High
- Show moreLoading…