Skip to contentNetapp Steelstore vulnerabilities
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- debian linux, mcafee epolicy orchestrator, netapp active iq unified manager +14 more +16 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14782Fix available3.7 Low
- intel active management technology firmware, standard manageability, netapp steelstore cloud integrated storage +2 moreImproper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM...CVE-2020-87589.8 Critical
- isc bind, canonical ubuntu linux, debian linux +4 more +6 moreupdate-policy rules of type "subdomain" are enforced incorrectlyCVE-2020-8624Fix available4.3 Medium
- isc bind, canonical ubuntu linux, debian linux +5 more +7 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cCVE-2020-8623Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failureCVE-2020-8622Fix available6.5 Medium
- isc bind, canonical ubuntu linux, isc bind9 +3 more +5 moreAttempting QNAME minimization after forwarding can lead to an assertion failure in resolver.cCVE-2020-8621Fix available7.5 High
- isc bind, canonical ubuntu linux, isc bind9 +2 more +4 moreIn BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with...CVE-2020-8620Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain...CVE-2020-16166Fix available3.7 Low
- openbsd openssh, broadcom fabric operating system, netapp a700s firmware +9 more +11 morescp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated...CVE-2020-15778Public exploitFix availableDisputedEPSS 13.7%7.4 High
- linux kernel, xen, netapp cloud backup +2 more +4 moreAn issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for...CVE-2020-15852Fix available7.8 High
- oracle corporation java, netapp 7-mode transition tool, active iq unified manager +13 more +15 moreVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version...CVE-2020-14664Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2020-14621Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14593Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14583Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14581Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14579Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14578Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)....CVE-2020-14577Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14556Fix available4.8 Medium
- openbsd openssh, netapp active iq unified manager, aff a700s firmware +9 more +11 moreThe client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...CVE-2020-14145Fix available5.9 Medium
- ntp, netapp 8300 firmware, 8700 firmware +13 more +15 morentpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a...CVE-2020-15025Fix available4.4 Medium
- isc bind, bind9, canonical ubuntu linux +4 more +6 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8619Fix available4.9 Medium
- canonical ubuntu linux, isc bind, bind9 +2 more +4 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8618Fix available4.9 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +11 more +13 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14195Public exploitFix available8.1 High
- pcre, apple macos, gitlab +12 more +14 morelibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.CVE-2020-14155Fix available5.3 Medium
- fasterxml jackson-databind, netapp active iq unified manager, steelstore cloud integrated storage +9 more +11 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14060Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14061Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +10 more +12 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14062Fix available8.1 High
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +16 more +18 moreA flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows...CVE-2020-10732Fix available3.3 Low
- postgresql jdbc driver, debian linux, fedoraproject fedora +2 more +4 moreImproper Restriction of XML External Entity ReferenceCVE-2020-13692Fix available7.7 High
- ntp, fujitsu m10-1 firmware, m10-4 firmware +22 more +24 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...CVE-2020-13817Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...CVE-2020-10757Public exploitFix available7.8 High
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in DjangoCVE-2020-13596Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in DjangoCVE-2020-13254Public exploitFix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- linux kernel, netapp active iq unified manager, aff baseboard management controller +5 more +7 moreAn issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has...CVE-2020-12659Fix available6.7 Medium
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...CVE-2020-12653Fix available7.8 High
- linux kernel, netapp active iq unified manager, aff baseboard management controller +6 more +8 moreAn array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c...CVE-2020-12465Fix available6.7 Medium
- linux kernel, netapp active iq unified manager, aff a700s +7 more +9 moreusb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free...CVE-2020-12464Fix available6.7 Medium
- openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 moreIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...CVE-2020-12243Fix available7.5 High
- Show olderLoading…