Netapp Hci Storage Node vulnerabilities

• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• linux, linux kernel, netapp converged systems advisor agent +8 more +10 more NFSD: Fix nfsd4_encode_fattr4() crasher CVE-2024-36958 Fix available 9.8 CriticalMay 30, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• greenwoodsoftware less, debian linux, netapp bootstrap os +2 more +4 more less through 653 allows OS command execution via a newline character in the name of a file,... CVE-2024-32487 Fix available 8.6 HighApril 13, 2024
• linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 more Kernel: use after free in nvmet_tcp_free_crypto in nvme CVE-2023-5178 Public exploitFix available 8.8 HighOctober 18, 2023
• certifi, certifi python-certifi, fedoraproject fedora +6 more +8 more Certifi's removal of e-Tugra root certificate CVE-2023-37920 Fix available 7.5 HighJuly 25, 2023
• linux kernel, fedora, netapp h300s +8 more +10 more Session race condition remote code execution vulnerability CVE-2023-32257 Fix available 8.1 HighJuly 24, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does... CVE-2023-38432 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not... CVE-2023-38428 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in... CVE-2023-38426 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, fedora, netapp h300s +9 more +11 more Session race condition remote code execution vulnerability CVE-2023-32250 Fix available 9.0 CriticalMay 22, 2023
• debian linux, linux kernel, netapp active iq unified manager +6 more +8 more nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote... CVE-2022-36946 Public exploitFix available 7.5 HighJuly 27, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 more Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• debian linux, linux kernel, netapp 8300 firmware +10 more +12 more The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows... CVE-2022-30594 Public exploitFix available 7.8 HighMay 12, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 more Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure... CVE-2022-30115 Fix available 4.3 MediumMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 more libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided... CVE-2022-27779 Fix available 5.3 MediumMay 11, 2022
• haxx curl, debian linux, netapp clustered data ontap +12 more +14 more libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... CVE-2022-27781 Fix available 7.5 HighMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 more The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... CVE-2022-27780 Fix available 7.5 HighMay 11, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more Resource leakage when decoding certificates and keys CVE-2022-1473 Fix available 7.5 HighMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +27 more +29 more Incorrect MAC key used in the RC4-MD5 ciphersuite CVE-2022-1434 Fix available 5.9 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more OCSP_basic_verify may incorrectly verify the response signing certificate CVE-2022-1343 Fix available 5.3 MediumMay 3, 2022
• openssl, debian linux, fedoraproject fedora +37 more +39 more The c_rehash script allows command injection CVE-2022-1292 Public exploitFix available EPSS 82.6% 7.3 HighMay 3, 2022
• haxx curl, broadcom fabric operating system, debian linux +13 more +15 more A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak... CVE-2022-27776 Fix available 6.5 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by... CVE-2022-27775 Fix available 7.5 HighApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82... CVE-2022-27774 Fix available 5.7 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which... CVE-2022-22576 Fix available 8.1 HighApril 27, 2022
• oracle graalvm, azul zulu, debian linux +14 more +16 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21449 Public exploitFix available EPSS 77.2% 7.5 HighApril 19, 2022
• oracle graalvm, azul zulu, debian linux +15 more +17 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21434 Fix available 5.3 MediumApril 19, 2022
• oracle graalvm, azul zulu, debian linux +15 more +17 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21426 Fix available 5.3 MediumApril 19, 2022
• debian linux, linux kernel, netapp h300e firmware +10 more +12 more The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring... CVE-2022-28893 Fix available 7.8 HighApril 11, 2022
• linux kernel, fedoraproject fedora, netapp active iq unified manager +12 more +14 more jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use... CVE-2022-28796 Fix available 7.0 HighApril 8, 2022
• linux kernel, netapp bootstrap os, cloud volumes ontap mediator +14 more +16 more An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method... CVE-2020-36516 Fix available 5.9 MediumFebruary 26, 2022
• xmlsoft libxml2, apple ipados, iphone os +36 more +38 more valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 Fix available 7.5 HighFebruary 26, 2022
• intel 11th generation core series firmware, atom c3000 series firmware, atom c610 series firmware +13 more +15 more Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions... CVE-2021-0060 6.6 MediumFebruary 9, 2022
• python, fedoraproject fedora, netapp active iq unified manager +10 more +12 more A flaw was found in Python, specifically within the urllib.parse module. This module helps break... CVE-2022-0391 Fix available 7.5 HighFebruary 9, 2022
• debian linux, linux kernel, canonical ubuntu linux +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2022-0492 In KEVPublic exploitFix available 7.8 HighFebruary 8, 2022
• linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 more In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an... CVE-2021-45485 Public exploitFix available 7.5 HighDecember 25, 2021
• lxml, debian linux, fedoraproject fedora +8 more +10 more HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• apache log4j, log4j2, apple xcode +141 more +143 more Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021
• debian linux, linux kernel, fedoraproject fedora +18 more +20 more A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the... CVE-2021-20322 Fix available 7.4 HighOctober 19, 2021
• debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 more A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP... CVE-2021-3772 Fix available 6.5 MediumSeptember 9, 2021
• fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 more There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... CVE-2021-3733 Fix available 6.5 MediumSeptember 2, 2021
• intel bios, netapp aff bios, cloud backup +6 more +8 more Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated... CVE-2020-24486 5.5 MediumJune 9, 2021
• intel bios, netapp aff bios, cloud backup +8 more +10 more Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user... CVE-2020-12360 7.8 HighJune 9, 2021
• intel bios, netapp aff bios, cloud backup +6 more +8 more Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to... CVE-2020-12358 4.4 MediumJune 9, 2021
• intel bios, netapp aff bios, cloud backup +5 more +7 more Insufficient control flow management in the firmware for some Intel(R) Processors may allow an... CVE-2020-12359 6.8 MediumJune 9, 2021
• Show olderLoading…