Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...CVE-2021-4147Fix available6.5 Medium
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...CVE-2021-45960Public exploitFix available8.8 High
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-4197Fix available7.8 High
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...CVE-2021-4189Fix available5.3 Medium
- linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 moreIn the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an...CVE-2021-45485Public exploitFix available7.5 High
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreStorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a...CVE-2021-270064.4 Medium
- netapp virtual desktop serviceNetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a...CVE-2021-270079.8 Critical
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of...CVE-2021-45469Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...CVE-2021-44733Public exploitFix available7.0 High
- debian linux, linux kernel, netapp h300e firmware +12 more +14 moreA read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain...CVE-2021-4083Fix available7.0 High
- apache http server, apple mac os x, macos +10 more +12 morePossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierCVE-2021-44790Public exploitFix availableEPSS 96.8%9.8 Critical
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- ksmbd project ksmbd, netapp h300e firmware, h300s firmware +6 more +8 moreThe ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes...CVE-2021-45100Fix available7.5 High
- qos logback, netapp cloud manager, service level manager +3 more +5 moreRCE from attacker with configuration edit priviledges through JNDI lookupCVE-2021-42550Fix available6.6 Medium
- gnu binutils, debian linux, fedoraproject fedora +2 more +4 morestab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a...CVE-2021-45078Fix available7.8 High
- golang go, debian linux, netapp cloud insights telegraf +2 moregolang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716Fix available7.5 High
- openssl, netapp 500f firmware, a250 firmware +13 more +15 moreInvalid handling of X509_verify_cert() internal errors in libsslCVE-2021-4044Public exploitFix availableEPSS 50.1%7.5 High
- lxml, debian linux, fedoraproject fedora +8 more +10 moreHTML Cleaner allows crafted and SVG embedded scripts to pass throughCVE-2021-43818Fix available8.2 High
- linux kernel, netapp h300e firmware, h300s firmware +7 more +9 moreAn out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing...CVE-2021-4090Fix available7.1 High
- apache log4j, log4j2, apple xcode +141 more +143 moreApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsCVE-2021-44228In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2021-390025.9 Medium
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to...CVE-2021-389316.5 Medium
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2021-389265.5 Medium
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2021-296788.7 High
- netty, debian linux, netapp oncommand workflow automation +15 more +17 moreHTTP fails to validate against control chars in header names which may lead to HTTP request smugglingCVE-2021-43797Fix available6.5 Medium
- linux kernel, netapp cloud backup, h300e firmware +7 more +9 moreThe BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an...CVE-2018-25020Fix available7.8 High
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability...CVE-2021-389095.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter...CVE-2021-298675.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the...CVE-2021-297564.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a...CVE-2021-297195.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application...CVE-2021-297162.7 Low
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability...CVE-2021-204936.1 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords...CVE-2021-204705.9 Medium
- mozilla nss, nss esr, netapp cloud backup +7 more +9 moreNSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...CVE-2021-43527Fix availableEPSS 17.6%9.8 Critical
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- php, debian linux, netapp clustered data ontap +1 more +3 moreSpecial characters break path parsing in XML functionsCVE-2021-21707Public exploitFix availableEPSS 25.3%5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia...CVE-2021-43975Fix available6.7 Medium
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreIn the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb...CVE-2021-43976Fix available4.6 Medium
- gmplib gmp, debian linux, netapp active iq unified manager +8 more +10 moreGNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer...CVE-2021-43618Fix available7.5 High
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn attacker-controlled pointer free in Busybox's hush applet leads to denial of service and...CVE-2021-42377Fix available9.8 Critical
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreA NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a...CVE-2021-42376Fix available5.5 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn incorrect handling of a special element in Busybox's ash applet leads to denial of service...CVE-2021-42375Fix available5.5 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of...CVE-2021-42374Fix available5.3 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreA NULL pointer dereference in Busybox's man applet leads to denial of service when a section name...CVE-2021-42373Fix available5.5 Medium
- npmjs npm, fedoraproject fedora, netapp next generation application programming interface +2 moreThe npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if...CVE-2021-43616Public exploitFix availableDisputed9.0 Critical
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2021-34866Fix available8.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +6 more +8 moreAn issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent...CVE-2021-43267Public exploitFix availableEPSS 57.9%9.8 Critical
- gnome glib, debian linux, netapp active iq unified manager +2 moreA flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak...CVE-2021-3800Fix available5.5 Medium
- netapp ontap system managerClustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are...CVE-2021-270057.5 High
- netapp ontap system managerSystem Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to...CVE-2021-270045.5 Medium
- Show moreLoading…