Skip to contentNetapp Hci vulnerabilities
- broadcom fabric operating system, linux kernel, netapp aff 500f firmware +18 more +20 moreHeap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACECVE-2021-22555In KEVPublic exploitFix availableEPSS 78.7%8.3 High
- intel bios, netapp aff bios, cloud backup +6 more +8 moreImproper input validation in the firmware for some Intel(R) Processors may allow an authenticated...CVE-2020-244865.5 Medium
- intel bios, netapp aff bios, cloud backup +8 more +10 moreOut of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user...CVE-2020-123607.8 High
- intel bios, netapp aff bios, cloud backup +6 more +8 moreOut of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to...CVE-2020-123584.4 Medium
- intel bios, netapp aff bios, cloud backup +5 more +7 moreInsufficient control flow management in the firmware for some Intel(R) Processors may allow an...CVE-2020-123596.8 Medium
- intel bios, netapp aff bios, cloud backup +5 more +7 moreImproper input validation in the firmware for some Intel(R) Processors may allow a privileged...CVE-2020-87006.7 Medium
- intel bios, netapp aff bios, cloud backup +15 more +17 moreRace condition in the firmware for some Intel(R) Processors may allow a privileged user to...CVE-2020-86706.4 Medium
- intel bios, netapp aff bios, cloud backup +16 more +18 moreImproper initialization in the firmware for some Intel(R) Processors may allow a privileged user...CVE-2020-123576.7 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2021-28169Fix availableEPSS 78.5%5.3 Medium
- debian linux, intel microcode, netapp fas\/aff bios +2 more +4 moreObservable timing discrepancy in some Intel(R) Processors may allow an authenticated user to...CVE-2020-24512Fix available3.3 Low
- debian linux, intel microcode, netapp fas\/aff bios +2 more +4 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...CVE-2020-24511Fix available6.5 Medium
- linux kernel, netapp aff 8300 firmware, aff 8700 firmware +19 more +21 moreAn issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after...CVE-2019-25045Fix available7.8 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- linux kernel, fedoraproject fedora, netapp cloud backup +9 more +11 morekernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer...CVE-2021-33200Fix available7.8 High
- haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...CVE-2021-22897Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, cloud backup +26 more +28 morecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...CVE-2021-22901Fix availableEPSS 63.5%8.1 High
- isc dhcp, debian linux, fedoraproject fedora +13 more +15 moreA buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclientCVE-2021-25217Fix available7.4 High
- linux kernel, netapp cloud backup, h300e firmware +9 more +11 moreThe block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to...CVE-2019-250447.8 High
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3517Fix availableEPSS 17.0%8.6 High
- gstreamer, netapp active iq unified manager, e-series santricity os controller +9 more +11 moreGStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.CVE-2021-3522Fix available5.5 Medium
- oracle graalvm, debian linux, fedoraproject fedora +10 more +12 moreVulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of...CVE-2021-2161Fix available5.9 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system +12 more +14 moreLinux Kernel sctp_destroy_sock race conditionCVE-2021-23133Fix available6.7 Medium
- oracle graalvm, debian linux, fedoraproject fedora +9 more +11 moreVulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of...CVE-2021-2163Fix available5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreIncorrect computation of branch displacements in BPF JIT compilers the Linux kernel can be abused...CVE-2021-29154Fix available7.8 High
- haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 morecurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...CVE-2021-22890Fix available3.7 Low
- haxx libcurl, broadcom fabric operating system, debian linux +12 more +14 morecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...CVE-2021-22876Fix available5.3 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, netapp cloud backup +3 more +5 moreThere is an open race window when writing output in the following utilities in GNU binutils...CVE-2021-20197Fix available6.3 Medium
- netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 moreElement Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework...CVE-2021-269879.8 Critical
- openbsd openssh, fedoraproject fedora, netapp cloud backup +9 more +11 moressh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common...CVE-2021-28041Fix available7.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headersCVE-2020-27223Public exploitFix availableEPSS 78.0%5.2 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping...CVE-2021-26932Fix available5.5 Medium
- linux kernel, netapp aff baseboard management controller, baseboard management controller 500f firmware +6 more +8 moreA local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race...CVE-2021-26708Public exploitFix available7.0 High
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 High
- sudo project sudo, fedoraproject fedora, netapp hci management node +1 more +3 moreselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to...CVE-2021-23240Fix available7.8 High
- sudo project sudo, debian linux, fedoraproject fedora +3 more +5 moreThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform...CVE-2021-23239Fix available2.5 Low
- netapp element os, hci management node, hci storage node +1 more +3 moreElement OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow...CVE-2020-85849.8 Critical
- gnu binutils, broadcom brocade fabric operating system, netapp cloud backup +5 more +7 moreThere's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils which could allow an...CVE-2020-35507Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an...CVE-2020-35496Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to...CVE-2020-35495Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted...CVE-2020-35494Fix available6.1 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreA flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to...CVE-2020-35493Fix available5.5 Medium
- debian linux, linux kernel, xen +3 more +5 moreAn issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The...CVE-2020-29569Fix available8.8 High
- gnu binutils, netapp cloud backup, hci management node +2 more +4 moreA Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka...CVE-2020-16599Fix available5.5 Medium
- gnu binutils, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreA Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka...CVE-2020-16593Fix available5.5 Medium
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- Show moreLoading…