Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host...CVE-2022-232376.1 Medium
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND...CVE-2022-232364.4 Medium
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets...CVE-2022-1786Fix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a...CVE-2022-1652Fix available7.8 High
- linux kernel, netapp h300e firmware, h300s firmware +7 more +9 moreA flaw use after free in the Linux kernel pipes functionality was found in the way user do some...CVE-2022-1882Fix available7.8 High
- linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 moreAn issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock...CVE-2022-1678Fix available5.9 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows...CVE-2022-1355Fix available6.1 Medium
- debian dpkg, linux, netapp ontap select deploy administration utility +2 moredirectory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tarCVE-2022-1664Fix available9.8 Critical
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreundertow Race Condition vulnerabilityCVE-2021-3597Fix available5.9 Medium
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreUndertow Uncontrolled Resource ConsumptionCVE-2021-3629Fix available5.9 Medium
- golang go, fedoraproject fedora, netapp beegfs csi driver +2 moregolang.org/x/sys/unix has Incorrect privilege reporting in syscallCVE-2022-29526Fix available5.3 Medium
- linux kernel, netapp hci baseboard management controller +1 moreImportant: kernel security and bug fix updateCVE-2022-1729Fix available7.0 High
- yaml project yaml, netapp astra trident +1 moregopkg.in/yaml.v3 Denial of ServiceCVE-2022-28948Fix available7.5 High
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreInteger overflow in BCrypt class in Spring SecurityCVE-2022-22976Public exploitFix available5.3 Medium
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreAuthorization bypass in Spring SecurityCVE-2022-22978Public exploitFix availableEPSS 12.4%9.8 Critical
- debian linux, linux kernel, netapp h300e firmware +7 more +9 moreA flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can...CVE-2022-1734Fix available7.0 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA use after free in the Linux kernel File System notify functionality was found in the way user...CVE-2022-1998Fix available7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the...CVE-2022-1671Fix available7.1 High
- isc bind, bind9, netapp h300s firmware +4 more +6 moreDestroying a TLS session early causes assertion failureCVE-2022-1183Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...CVE-2022-29581Public exploitFix available7.8 High
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way...CVE-2022-1679Public exploitFix available7.8 High
- pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1587Fix available9.1 Critical
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1586Fix available9.1 Critical
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to...CVE-2022-1116Fix available7.8 High
- vmware spring framework, netapp cloud secure agent, oncommand insight +1 more +3 moreAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971Public exploitFix available6.5 Medium
- vmware spring framework, netapp active iq unified manager, brocade san navigator +3 more +5 moreDenial of service in Spring FrameworkCVE-2022-22970Public exploitFix available5.3 Medium
- debian linux, intel celeron j1750 firmware, celeron j1800 firmware +396 more +398 moreProcessor optimization removal or modification of security-critical code for some Intel(R)...CVE-2022-21151Fix available5.5 Medium
- intel bios, netapp fas\/aff bios +1 moreImproper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS...CVE-2021-33117Fix available5.5 Medium
- debian linux, linux kernel, netapp 8300 firmware +10 more +12 moreThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...CVE-2022-30594Public exploitFix available7.8 High
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...CVE-2022-27778Fix available8.1 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...CVE-2022-27780Fix available7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing...CVE-2022-1623Fix available5.5 Medium
- libtiff, apple iphone os, macos +4 more +6 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing...CVE-2022-1622Fix available5.5 Medium
- vim, vim vim/vim, apple macos +4 more +6 moreHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimCVE-2022-1619Fix available6.1 Medium
- netty, netapp active iq unified manager, oncommand workflow automation +2 more +4 moreLocal Information Disclosure Vulnerability in io.netty:netty-codec-httpCVE-2022-24823Fix available5.5 Medium
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreBuffer overflow in TCP syslog server (receiver) components in rsyslogCVE-2022-24903Public exploitFix available8.1 High
- openldap, debian linux, netapp h300s firmware +8 more +10 moreIn OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...CVE-2022-29155Fix availableEPSS 64.5%9.8 Critical
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keysCVE-2022-1473Fix available7.5 High
- openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuiteCVE-2022-1434Fix available5.9 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreOCSP_basic_verify may incorrectly verify the response signing certificateCVE-2022-1343Fix available5.3 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c...CVE-2022-29968Public exploitFix available7.8 High
- google gson, debian linux, netapp active iq unified manager +3 more +5 moreDeserialization of Untrusted DataCVE-2022-25647Fix availableEPSS 12.2%7.7 High
- angular, angularjs, fedoraproject fedora +1 more +3 moreRegular Expression Denial of Service (ReDoS)CVE-2022-25844Fix available5.3 Medium
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel....CVE-2022-1353Fix available7.1 High
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreA Malformed Lua script can crash RedisCVE-2022-24736Fix available3.3 Low
- Show moreLoading…