Skip to contentNetapp Ontap vulnerabilities
- gnu grub2, fedoraproject fedora, netapp cloud backup +6 more +8 moreA flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of...CVE-2020-14372Public exploitFix available7.5 High
- gnu glibc, debian linux, netapp 500f firmware +14 more +16 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...CVE-2020-27618Fix available5.5 Medium
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache PoisoningCVE-2021-23336Fix availableEPSS 41.1%5.9 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which...CVE-2020-85903.3 Low
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could...CVE-2020-85783.3 Low
- php, debian linux, netapp clustered data ontap +1 more +3 moreNull Dereference in SoapClientCVE-2021-21702Fix available5.3 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which...CVE-2020-85893.5 Low
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which...CVE-2020-85883.5 Low
- gnu glibc, debian linux, fujitsu m10-1 firmware +11 more +13 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...CVE-2021-3326Fix available7.5 High
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 High
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which...CVE-2020-85816.5 Medium
- python, debian linux, fedoraproject fedora +10 more +12 morePython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...CVE-2021-3177Fix availableEPSS 24.0%9.8 Critical
- php, debian linux, netapp clustered data ontap +2 moreFILTER_VALIDATE_URL accepts URLs with invalid userinfoCVE-2020-7071Fix available5.3 Medium
- gnu binutils, broadcom brocade fabric operating system, netapp cloud backup +5 more +7 moreThere's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils which could allow an...CVE-2020-35507Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an...CVE-2020-35496Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to...CVE-2020-35495Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted...CVE-2020-35494Fix available6.1 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreA flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to...CVE-2020-35493Fix available5.5 Medium
- gnu glibc, broadcom fabric operating system, debian linux +8 more +10 moreThe iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...CVE-2019-25013Fix available5.9 Medium
- google libwebp, debian linux, netapp ontap select deploy administration utility +1 more +3 moreA flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an...CVE-2020-36332Fix available7.5 High
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2020-36331Fix available9.1 Critical
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2020-36330Fix available9.1 Critical
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread...CVE-2020-36329Fix available9.8 Critical
- google libwebp, apple ipados, iphone os +3 more +5 moreA flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function...CVE-2020-36328Fix available9.8 Critical
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff...CVE-2020-35524Fix available7.8 High
- libtiff, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw...CVE-2020-35523Fix available7.8 High
- gnu binutils, netapp ontap select deploy administration utility +1 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2020-35448Fix available3.3 Low
- gnu binutils, netapp cloud backup, hci management node +2 more +4 moreA Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka...CVE-2020-16599Fix available5.5 Medium
- gnu binutils, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreA Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka...CVE-2020-16593Fix available5.5 Medium
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU...CVE-2020-16592Fix available5.5 Medium
- gnu binutils, netapp ontap select deploy administration utility +1 moreA Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.34...CVE-2020-16591Fix available5.5 Medium
- gnu binutils, netapp ontap select deploy administration utility +1 moreA double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU...CVE-2020-16590Fix available5.5 Medium
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- intel xeon bronze 3104 firmware, xeon bronze 3106 firmware, xeon bronze 3204 firmware +134 more +136 moreImproper input validation in BIOS firmware for some Intel(R) Processors may allow an...CVE-2020-05907.8 High
- apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 moreApache CXF Reflected XSS in the services listing page via the styleSheetPathCVE-2020-13954Fix availableEPSS 40.9%6.1 Medium
- debian linux, fedoraproject fedora, intel microcode +14 more +16 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...CVE-2020-8698Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel microcode +4 more +6 moreImproper removal of sensitive information before storage or transfer in some Intel(R) Processors...CVE-2020-8696Fix available5.5 Medium
- redhat libvirt, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 moreAn information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP...CVE-2020-143016.5 Medium
- netapp clustered data ontapClustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows...CVE-2020-85797.5 High
- freetype, google chrome, debian linux +4 more +6 moreHeap buffer overflow in CefSharpCVE-2020-15999In KEVPublic exploitFix availableEPSS 63.9%9.6 Critical
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- freebsd, omniosce omnios, openindiana +1 more +3 morebhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and...CVE-2020-247188.2 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a...CVE-2020-85765.4 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- Show moreLoading…