Skip to contentNetapp Ontap vulnerabilities
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...CVE-2022-27774Fix available5.7 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...CVE-2022-22576Fix available8.1 High
- python, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...CVE-2015-20107Public exploitFix available7.6 High
- libtiff, netapp ontap select deploy administration utility +1 moreLibTIFF tiff2ps resource consumptionCVE-2022-1210Fix available4.3 Medium
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method...CVE-2022-0897Fix available4.3 Medium
- nokogiri, zlib, apple mac os x +28 more +30 moreNokogiri affected by zlib's Out-of-bounds Write vulnerabilityCVE-2018-25032Public exploitFix availableEPSS 51.7%7.5 High
- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificatesCVE-2022-0778Public exploitFix availableEPSS 73.2%7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreOut-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0924Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0909Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in...CVE-2022-0908Fix available7.7 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers...CVE-2022-0907Fix available5.5 Medium
- python, netapp active iq unified manager, ontap select deploy administration utility +3 more +5 moreIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is...CVE-2022-26488Public exploitFix available7.0 High
- linux kernel, netapp bootstrap os, cloud volumes ontap mediator +14 more +16 moreAn issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method...CVE-2020-36516Fix available5.9 Medium
- xmlsoft libxml2, apple ipados, iphone os +36 more +38 morevalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.CVE-2022-23308Fix available7.5 High
- cyrusimap cyrus-sasl, debian linux, fedoraproject fedora +8 more +10 moreIn Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...CVE-2022-24407Fix available8.8 High
- kernel util-linux, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support....CVE-2022-0563Fix available5.5 Medium
- sqlite, netapp ontap select deploy administration utility +1 moreA Memory Leak vulnerabilty exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously...CVE-2021-45346Fix availableDisputed4.3 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in...CVE-2022-0562Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in...CVE-2022-0561Fix available5.5 Medium
- intel celeron g1610, celeron g1610t, celeron g1620 +752 more +754 moreInsufficient control flow management in some Intel(R) Processors may allow an authenticated user...CVE-2021-0127Fix available5.5 Medium
- python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...CVE-2022-0391Fix available7.5 High
- gnu glibc, debian linux, netapp e-series performance analyzer +10 more +12 moreA flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to...CVE-2021-3999Fix available7.8 High
- gnu glibc, netapp h300s firmware, h410c firmware +7 more +9 moreA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...CVE-2021-3998Fix available7.5 High
- libexpat project libexpat, debian linux, netapp clustered data ontap +7 more +9 moreExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...CVE-2022-23852Public exploitFix available9.8 Critical
- libtiff, debian linux, netapp ontap select deploy administration utility +2 moreLibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations...CVE-2022-22844Fix available5.5 Medium
- libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 moreIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...CVE-2021-46143Public exploitFix available8.1 High
- redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...CVE-2021-4147Fix available6.5 Medium
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...CVE-2021-4189Fix available5.3 Medium
- gnu binutils, debian linux, fedoraproject fedora +2 more +4 morestab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a...CVE-2021-45078Fix available7.8 High
- openssl, netapp 500f firmware, a250 firmware +13 more +15 moreInvalid handling of X509_verify_cert() internal errors in libsslCVE-2021-4044Public exploitFix availableEPSS 50.1%7.5 High
- apache log4j, log4j2, apple xcode +141 more +143 moreApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsCVE-2021-44228In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- php, debian linux, netapp clustered data ontap +1 more +3 moreSpecial characters break path parsing in XML functionsCVE-2021-21707Public exploitFix availableEPSS 25.3%5.3 Medium
- netapp ontap system managerClustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are...CVE-2021-270057.5 High
- netapp ontap system managerSystem Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to...CVE-2021-270045.5 Medium
- php, debian linux, fedoraproject fedora +2 more +4 morePHP-FPM memory access in root process leading to privilege escalationCVE-2021-21703Fix available7.8 High
- netapp clustered data ontapClustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are...CVE-2021-270015.5 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X...CVE-2021-270034.7 Medium
- samba, debian linux, netapp management services for element software +2 more +4 moreA null pointer de-reference was found in the way samba kerberos server handled missing sname in...CVE-2021-3671Fix available6.5 Medium
- openbsd openssh, fedoraproject fedora, netapp active iq unified manager +14 more +16 moresshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...CVE-2021-41617Public exploitFix available7.0 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache http server, debian linux, fedoraproject fedora +7 more +9 moreap_escape_quotes buffer overflowCVE-2021-39275Fix availableEPSS 39.4%9.8 Critical
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound readCVE-2021-36160Fix availableEPSS 63.7%7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- openbsd openssh, netapp clustered data ontap, hci management node +2 more +4 moreOpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of...CVE-2016-20012Public exploitDisputed5.3 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreUse After Free in vim/vimCVE-2021-3796Fix available8.2 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3778Fix available7.8 High
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...CVE-2021-22945Fix available9.1 Critical
- Show moreLoading…