Netapp Solidfire vulnerabilities

• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• linux, linux kernel, netapp converged systems advisor agent +8 more +10 more NFSD: Fix nfsd4_encode_fattr4() crasher CVE-2024-36958 Fix available 9.8 CriticalMay 30, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• greenwoodsoftware less, debian linux, netapp bootstrap os +2 more +4 more less through 653 allows OS command execution via a newline character in the name of a file,... CVE-2024-32487 Fix available 8.6 HighApril 13, 2024
• linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 more Kernel: use after free in nvmet_tcp_free_crypto in nvme CVE-2023-5178 Public exploitFix available 8.8 HighOctober 18, 2023
• certifi, certifi python-certifi, fedoraproject fedora +6 more +8 more Certifi's removal of e-Tugra root certificate CVE-2023-37920 Fix available 7.5 HighJuly 25, 2023
• linux kernel, fedora, netapp h300s +8 more +10 more Session race condition remote code execution vulnerability CVE-2023-32257 Fix available 8.1 HighJuly 24, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does... CVE-2023-38432 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +3 more +5 more An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd... CVE-2023-38431 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not... CVE-2023-38428 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in... CVE-2023-38426 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, debian linux, netapp h300s firmware +5 more +7 more The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of... CVE-2023-2007 Fix available 7.8 HighApril 24, 2023
• openbsd openssh, netapp brocade fabric operating system, hci bootstrap os +4 more +6 more ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop... CVE-2023-28531 Fix available 9.8 CriticalMarch 17, 2023
• libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 more In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared... CVE-2022-43680 Public exploitFix available 7.5 HighOctober 24, 2022
• haxx curl, apple macos, debian linux +14 more +16 more When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... CVE-2022-35252 Fix available 3.7 LowAugust 31, 2022
• debian linux, linux kernel, netapp active iq unified manager +6 more +8 more nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote... CVE-2022-36946 Public exploitFix available 7.5 HighJuly 27, 2022
• oracle jdk, openjdk, apache xalan-java +14 more +16 more Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets CVE-2022-34169 Public exploitFix available EPSS 81.8% 7.5 HighJuly 19, 2022
• oracle graalvm, azul zulu, debian linux +12 more +14 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21549 Fix available 5.3 MediumJuly 19, 2022
• oracle graalvm, azul zulu, debian linux +13 more +15 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21541 Fix available 5.9 MediumJuly 19, 2022
• oracle graalvm, azul zulu, debian linux +13 more +15 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21540 Fix available 5.3 MediumJuly 19, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 more Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... CVE-2022-32208 Fix available 5.9 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation... CVE-2022-32207 Fix available EPSS 12.3% 9.8 CriticalJune 27, 2022
• haxx curl, debian linux, fedoraproject fedora +20 more +22 more curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can... CVE-2022-32206 Fix available EPSS 36.3% 6.5 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +20 more +22 more A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to... CVE-2022-32205 Fix available EPSS 31.5% 4.3 MediumJune 27, 2022
• openssl, broadcom sannav, debian linux +29 more +31 more The c_rehash script allows command injection CVE-2022-2068 Fix available EPSS 96.4% 7.3 HighJune 21, 2022
• linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 more An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock... CVE-2022-1678 Fix available 5.9 MediumMay 25, 2022
• pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 more An out-of-bounds read vulnerability was discovered in the PCRE2 library in the... CVE-2022-1587 Fix available 9.1 CriticalMay 16, 2022
• pcre pcre2, debian linux, fedoraproject fedora +10 more +12 more An out-of-bounds read vulnerability was discovered in the PCRE2 library in the... CVE-2022-1586 Fix available 9.1 CriticalMay 16, 2022
• debian linux, linux kernel, netapp 8300 firmware +10 more +12 more The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows... CVE-2022-30594 Public exploitFix available 7.8 HighMay 12, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 more Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure... CVE-2022-30115 Fix available 4.3 MediumMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 more libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided... CVE-2022-27779 Fix available 5.3 MediumMay 11, 2022
• haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 more A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when... CVE-2022-27778 Fix available 8.1 HighMay 11, 2022
• haxx curl, debian linux, netapp clustered data ontap +12 more +14 more libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... CVE-2022-27781 Fix available 7.5 HighMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 more The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... CVE-2022-27780 Fix available 7.5 HighMay 11, 2022
• vim, vim vim/vim, apple macos +4 more +6 more Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim CVE-2022-1619 Fix available 6.1 MediumMay 8, 2022
• xmlsoft libxml2, libxslt, debian linux +19 more +21 more In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ... CVE-2022-29824 Fix available 6.5 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more Resource leakage when decoding certificates and keys CVE-2022-1473 Fix available 7.5 HighMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +27 more +29 more Incorrect MAC key used in the RC4-MD5 ciphersuite CVE-2022-1434 Fix available 5.9 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more OCSP_basic_verify may incorrectly verify the response signing certificate CVE-2022-1343 Fix available 5.3 MediumMay 3, 2022
• openssl, debian linux, fedoraproject fedora +37 more +39 more The c_rehash script allows command injection CVE-2022-1292 Public exploitFix available EPSS 82.6% 7.3 HighMay 3, 2022
• linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 more An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c... CVE-2022-29968 Public exploitFix available 7.8 HighMay 2, 2022
• haxx curl, broadcom fabric operating system, debian linux +13 more +15 more A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak... CVE-2022-27776 Fix available 6.5 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by... CVE-2022-27775 Fix available 7.5 HighApril 27, 2022
• Show olderLoading…