Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in...CVE-2020-456110.0 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code...CVE-2020-45207.1 High
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability...CVE-2020-43545.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack...CVE-2020-43008.2 High
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack...CVE-2019-47307.1 High
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a...CVE-2019-47244.6 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a...CVE-2019-47234.6 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information...CVE-2019-47224.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability...CVE-2019-46535.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information,...CVE-2019-44715.3 Medium
- trim-newlines project trim-newlines, debian linux, netapp e-series performance analyzer +2 moreUncontrolled Resource Consumption in trim-newlinesCVE-2021-33623Fix available7.5 High
- css-what project css-what, netapp e-series performance analyzer +1 moreDenial of service in css-whatCVE-2021-33587Fix available7.5 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- squid-cache squid, fedoraproject fedora, netapp cloud manager +2 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem...CVE-2021-31807Fix availableEPSS 15.6%6.5 Medium
- linux kernel, fedoraproject fedora, netapp cloud backup +9 more +11 morekernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer...CVE-2021-33200Fix available7.8 High
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug...CVE-2021-31808Fix available6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug...CVE-2021-31806Fix availableEPSS 95.3%6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2021-28651Fix available7.5 High
- debian linux, fedoraproject fedora, linux kernel +10 more +12 moreImproper memory handling in Linux KVMCVE-2021-22543Fix available8.7 High
- haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...CVE-2021-22897Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, cloud backup +26 more +28 morecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...CVE-2021-22901Fix availableEPSS 63.5%8.1 High
- isc dhcp, debian linux, fedoraproject fedora +13 more +15 moreA buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclientCVE-2021-25217Fix available7.4 High
- websockets ws, netapp e-series performance analyzer +1 moreReDoS in Sec-Websocket-Protocol headerCVE-2021-32640Fix available5.3 Medium
- gnu glibc, debian linux, fedoraproject fedora +13 more +15 moreThe mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...CVE-2021-33574Fix available9.8 Critical
- f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 moreA security issue in nginx resolver was identified, which might allow an attacker who is able to...CVE-2021-23017Public exploitFix availableEPSS 53.5%7.7 High
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It...CVE-2021-35596.5 Medium
- linux kernel, netapp cloud backup, h300e firmware +7 more +9 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2021-31440Public exploitFix available8.8 High
- x-stream xstream, debian linux, fedoraproject fedora +14 more +16 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-29505Public exploitFix availableEPSS 77.2%7.5 High
- gnome libxml2, netapp active iq unified manager, cloud backup +19 more +21 moreA flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all...CVE-2021-3541Fix available6.5 Medium
- linux kernel, netapp cloud backup, h300e firmware +9 more +11 moreThe block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to...CVE-2019-250447.8 High
- debian linux, linux kernel, fedoraproject fedora +7 more +9 moreLinux kernel llcp_sock_bind/connect use-after-freeCVE-2021-23134Fix available7.8 High
- debian linux, linux kernel, netapp cloud backup +8 more +10 morenet/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal...CVE-2021-32399Public exploitFix available7.0 High
- systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moreAn exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP...CVE-2020-13529Fix available6.1 Medium
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- linux kernel, fedoraproject fedora, netapp cloud backup +16 more +18 moreA flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the...CVE-2021-3501Fix available7.1 High
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3517Fix availableEPSS 17.0%8.6 High
- gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 moreThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...CVE-2021-3516Fix available7.8 High
- lz4 project lz4, netapp active iq unified manager, cloud backup +7 more +9 moreThere's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4...CVE-2021-3520Fix available9.8 Critical
- gnu wget, broadcom brocade fabric operating system firmware, netapp 500f firmware +3 more +5 moreGNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different...CVE-2021-31879Fix available6.1 Medium
- isc bind, debian linux, isc bind9 +12 more +14 moreA second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackCVE-2021-25216Fix availableEPSS 83.0%8.1 High
- isc bind, debian linux, fedoraproject fedora +14 more +16 moreAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itselfCVE-2021-25215Fix availableEPSS 11.7%7.5 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedlyCVE-2021-25214Fix available6.5 Medium
- gstreamer, netapp active iq unified manager, e-series santricity os controller +9 more +11 moreGStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.CVE-2021-3522Fix available5.5 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2021-2308Fix available2.7 Low
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging)....CVE-2021-2307Fix available6.1 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-2305Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2021-2304Fix available5.5 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2021-2301Fix available2.7 Low
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-2300Fix available4.9 Medium
- Show moreLoading…