Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...CVE-2020-13630Fix available7.0 High
- sqlite, apple icloud, ipados +18 more +20 moreSQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...CVE-2020-13631Fix available5.5 Medium
- sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...CVE-2020-13632Fix available5.5 Medium
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreHTTP Request Smuggling in UndertowCVE-2020-10719Fix available6.5 Medium
- netapp element healthtools, element os +1 moreElement OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are...CVE-2020-85727.5 High
- jquery, juniper junos, netapp active iq unified manager +4 more +6 moreCross-Site Scripting in jqueryCVE-2020-7656Public exploitFix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- netapp aff a200 firmware, aff a220 firmware, aff a300 firmware +4 more +6 moreCertain versions of the NetApp Service Processor and Baseboard Management Controller firmware...CVE-2019-55007.5 High
- apache log4net, fedoraproject fedora, netapp manageability software development kit +4 more +6 moreXML External Entity attack in log4netCVE-2018-1285Public exploitFix availableEPSS 17.8%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- atto fibrebridge 7500n firmware, netapp atto fibrebridge 7500n +1 moreATTO FibreBridge 7500N firmware versions prior to 2.90 are susceptible to a vulnerability which...CVE-2018-54937.5 High
- linux kernel, netapp active iq unified manager, aff baseboard management controller +5 more +7 moreAn issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has...CVE-2020-12659Fix available6.7 Medium
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...CVE-2020-12653Fix available7.8 High
- linux kernel, netapp active iq unified manager, aff baseboard management controller +6 more +8 moreAn array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c...CVE-2020-12465Fix available6.7 Medium
- linux kernel, netapp active iq unified manager, aff a700s +7 more +9 moreusb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free...CVE-2020-12464Fix available6.7 Medium
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...CVE-2019-56149.8 Critical
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...CVE-2019-158749.8 Critical
- openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 moreIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...CVE-2020-12243Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreIn the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a...CVE-2020-11884Fix available7.0 High
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information...CVE-2019-47294.3 Medium
- f5 nginx controller, netapp cloud backup +1 moreIn versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP...CVE-2020-58678.1 High
- f5 nginx controller, netapp cloud backup +1 moreIn versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres...CVE-2020-58654.8 Medium
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- ntp, debian linux, netapp all flash fabric-attached storage 8300 firmware +14 more +16 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block...CVE-2020-11868Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2020-2930Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported...CVE-2020-2925Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2924Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2923Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2904Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling...CVE-2020-2903Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2901Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). The...CVE-2020-2898Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2897Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2020-2896Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2895Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2893Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2892Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2020-2853Fix available4.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)...CVE-2020-2830Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...CVE-2020-2816Fix available7.5 High
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2814Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2020-2812Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling)....CVE-2020-2806Fix available5.3 Medium
- Show moreLoading…