Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21525Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2022-21522Fix available4.4 Medium
- oracle mysql cluster, netapp active iq unified manager, oncommand insight +2 more +4 moreVulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)....CVE-2022-215195.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2022-21517Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2022-21515Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21509Fix available5.5 Medium
- oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin)....CVE-2022-21455Fix available4.9 Medium
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Public exploitFix availableEPSS 81.8%7.5 High
- oracle graalvm, azul zulu, debian linux +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21549Fix available5.3 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21541Fix available5.9 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21540Fix available5.3 Medium
- jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 morejQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text labelCVE-2022-31160Public exploitFix available6.1 Medium
- go standard library encoding/xml, golang go, fedoraproject fedora +1 more +3 moreStack exhaustion from deeply nested XML documents in encoding/xmlCVE-2022-28131Fix available7.5 High
- red hat undertow, netapp cloud secure agent, oncommand insight +3 more +5 moreUndertow vulnerable to Denial of Service (DoS) attacksCVE-2021-3859Fix available7.5 High
- grafana, netapp e-series performance analyzer +1 moreGrafana account takeover via OAuth vulnerabilityCVE-2022-31107Fix available7.1 High
- grafana, netapp e-series performance analyzer +1 moreStored XSS in Grafana's Unified AlertingCVE-2022-31097Fix availableEPSS 70.1%7.3 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of serviceCVE-2022-2048Fix available7.5 High
- apache commons configuration, debian linux, netapp snapcenter +2 moreApache Commons Configuration insecure interpolation defaultsCVE-2022-33980Public exploitFix availableEPSS 44.6%9.8 Critical
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreThere are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of...CVE-2022-2318Fix available5.5 Medium
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytesCVE-2022-2097Public exploitFix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...CVE-2022-34918Public exploitFix available7.8 High
- gnupg, debian linux, fedoraproject fedora +2 more +4 moreGnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information...CVE-2022-34903Fix available6.5 Medium
- openssl, netapp h300s firmware, h410c firmware +8 more +10 moreRSA implementation bug in AVX512IFMA instructionsCVE-2022-2274Public exploitFix availableEPSS 48.2%9.8 Critical
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service...CVE-2022-2058Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service...CVE-2022-2057Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service...CVE-2022-2056Fix available5.5 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...CVE-2022-32208Fix available5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...CVE-2022-32207Fix availableEPSS 12.3%9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...CVE-2022-32206Fix availableEPSS 36.3%6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...CVE-2022-32205Fix availableEPSS 31.5%4.3 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped()...CVE-2022-1354Fix available5.5 Medium
- ibm cognos analytics, planning analytics, netapp oncommand insight +2 moreIBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to...CVE-2021-390476.1 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary...CVE-2021-389456.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive...CVE-2021-297684.3 Medium
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injectionCVE-2022-2068Fix availableEPSS 96.4%7.3 High
- gnu grub2, gnu project grub, netapp active iq unified manager +2 moreOut-of-bounds write when handling split HTTP headersCVE-2022-28734Fix available8.1 High
- gnu grub2, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 moreA heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader....CVE-2021-3696Fix available4.5 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 moreA crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An...CVE-2021-3695Fix available4.5 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813Public exploitFix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreInformation Disclosure in mod_lua with websocketsCVE-2022-30556Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of serviceCVE-2022-30522Fix availableEPSS 89.9%7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreDenial of service in mod_lua r:parsebodyCVE-2022-29404Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreRead beyond bounds in ap_strcmp_match()CVE-2022-28615Fix available9.1 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreread beyond bounds via ap_rwrite()CVE-2022-28614Fix available5.3 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy_ajp: Possible request smugglingCVE-2022-26377Public exploitFix availableEPSS 21.1%7.5 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreCVE-2022-1973 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1973Fix available7.1 High
- go standard library crypto/rand, golang go, netapp cloud insights telegraf agent +2 moreIndefinite hang with large buffers on Windows in crypto/randCVE-2022-30634Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 morenet/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to...CVE-2022-32250Public exploitFix available7.8 High
- npm, netapp ontap select deploy administration utility +1 morenpm packing does not respect root-level ignore files in workspacesCVE-2022-29244Fix available7.5 High
- Show moreLoading…