Skip to contentNetapp Hci vulnerabilities
- linux kernel, netapp hci baseboard management controller, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.CVE-2023-26607Public exploitFix available7.1 High
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...CVE-2023-24329Public exploitFix availableEPSS 20.5%7.5 High
- ami megarac spx-12, megarac spx-13, megarac sp-x +2 more +4 morePassword reset interception via APICVE-2022-268728.3 High
- debian linux, linux kernel, netapp hci baseboard management controller +1 more +3 moreIn rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there...CVE-2023-23559Fix available7.8 High
- vim, vim vim/vim, apple macos +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2023-0049Fix available7.3 High
- netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 moreX.509 Policy Constraints Double LockingCVE-2022-3996Fix available7.5 High
- linux kernel, netapp hci baseboard management controller +1 moreA flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is...CVE-2022-41858Fix available7.1 High
- certifi, certifi python-certifi, netapp e-series performance analyzer +2 more +4 moreRemoval of TrustCor root certificateCVE-2022-23491Fix available6.8 Medium
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...CVE-2022-45061Fix available7.5 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreNetlogon RPC Elevation of Privilege VulnerabilityCVE-2022-38023Fix available8.1 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos Elevation of Privilege VulnerabilityCVE-2022-37967Fix available7.2 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos RC4-HMAC Elevation of Privilege VulnerabilityCVE-2022-37966Fix available8.1 High
- libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 moreIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared...CVE-2022-43680Public exploitFix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moremm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an...CVE-2022-41222Fix available7.0 High
- linux kernel, netapp hci baseboard management controller +1 moreAn issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged...CVE-2022-39189Fix available7.8 High
- haxx curl, apple macos, debian linux +14 more +16 moreWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...CVE-2022-35252Fix available3.7 Low
- jhy jsoup, netapp management services for element software, management services for netapp hci +1 more +3 morejsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabledCVE-2022-36033Fix available6.1 Medium
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- debian linux, linux kernel, netapp a700s firmware +22 more +24 moreAn issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm...CVE-2022-36879Fix available5.5 Medium
- debian linux, linux kernel, netapp active iq unified manager +6 more +8 morenfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote...CVE-2022-36946Public exploitFix available7.5 High
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Public exploitFix availableEPSS 81.8%7.5 High
- oracle graalvm, azul zulu, debian linux +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21549Fix available5.3 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21541Fix available5.9 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21540Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of serviceCVE-2022-2048Fix available7.5 High
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytesCVE-2022-2097Public exploitFix available5.3 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...CVE-2022-32208Fix available5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...CVE-2022-32207Fix availableEPSS 12.3%9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...CVE-2022-32206Fix availableEPSS 36.3%6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...CVE-2022-32205Fix availableEPSS 31.5%4.3 Medium
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injectionCVE-2022-2068Fix availableEPSS 96.4%7.3 High
- linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 moreAn issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock...CVE-2022-1678Fix available5.9 Medium
- linux kernel, netapp hci baseboard management controller +1 moreImportant: kernel security and bug fix updateCVE-2022-1729Fix available7.0 High
- pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1587Fix available9.1 Critical
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1586Fix available9.1 Critical
- debian linux, linux kernel, netapp 8300 firmware +10 more +12 moreThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...CVE-2022-30594Public exploitFix available7.8 High
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...CVE-2022-27778Fix available8.1 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...CVE-2022-27780Fix available7.5 High
- vim, vim vim/vim, apple macos +4 more +6 moreHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimCVE-2022-1619Fix available6.1 Medium
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keysCVE-2022-1473Fix available7.5 High
- openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuiteCVE-2022-1434Fix available5.9 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreOCSP_basic_verify may incorrectly verify the response signing certificateCVE-2022-1343Fix available5.3 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c...CVE-2022-29968Public exploitFix available7.8 High
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreA Malformed Lua script can crash RedisCVE-2022-24736Fix available3.3 Low
- Show moreLoading…