VYPR
← NetApp

Vendor CVEs

NetApp

All CVEs

2,589 total · sorted by risk
  • CVE-2020-35448LowDec 27, 2020
    GNU
    Binutils
    risk 0.22cvss 3.3epss 0.01

    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in…

  • CVE-2018-16866LowJan 11, 2019
    Systemd Project
    Systemd
    risk 0.22cvss 3.3epss 0.01

    An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

  • CVE-2018-3284MedOct 17, 2018
    MariaDB
    MariaDB
    risk 0.22cvss 4.4epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…

  • CVE-2018-2771MedApr 19, 2018
    MariaDB
    MariaDB
    risk 0.22cvss 4.4epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access…

  • CVE-2024-47554MedOct 3, 2024
    Apache
    Commons Io
    risk 0.21cvss 4.3epss 0.01

    Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users…

  • CVE-2024-38808MedAug 20, 2024
    VMware
    Spring Framework
    risk 0.21cvss 4.3epss 0.01

    In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when…

  • CVE-2024-39908MedJul 16, 2024
    Ruby Lang
    Rexml
    risk 0.21cvss 4.3epss 0.01

    REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`, `0` and `%>`. If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. The REXML gem 3.3.2…

  • CVE-2020-4951LowOct 15, 2021
    IBM
    Cognos Analytics
    risk 0.21cvss 3.3epss 0.00

    IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information.

  • CVE-2021-22555HigKEVJul 7, 2021
    Linux
    Kernel
    risk 0.21cvss 8.3epss 0.79

    A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

  • CVE-2020-24512LowJun 9, 2021
    Intel
    Processors
    risk 0.21cvss 3.3epss 0.00

    Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

  • CVE-2020-8590LowFeb 8, 2021
    NetApp
    Clustered Data Ontap
    risk 0.21cvss 3.3epss 0.00

    Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

  • CVE-2020-8578LowFeb 8, 2021
    NetApp
    Clustered Data Ontap
    risk 0.21cvss 3.3epss 0.00

    Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

  • CVE-2019-3823MedFeb 6, 2019
    Curl
    Libcurl
    risk 0.21cvss 4.3epss 0.04

    libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set to 5,…

  • CVE-2018-3058MedJul 18, 2018
    MariaDB
    MariaDB
    risk 0.21cvss 4.3epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2016-8612MedMar 9, 2018
    Apache
    HTTP Server
    risk 0.21cvss 4.3epss 0.04

    Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.

  • CVE-2025-22134MedJan 13, 2025
    Vim
    Vim
    risk 0.20cvss 4.2epss 0.00

    When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will…

  • CVE-2024-21005LowApr 16, 2024
    NetApp
    Oncommand Insight
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability…

  • CVE-2024-21003LowApr 16, 2024
    NetApp
    Oncommand Insight
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability…

  • CVE-2023-22048LowJul 18, 2023
    Fedoraproject
    Fedora
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2023-22006LowJul 18, 2023
    NetApp
    Oncommand Insight
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10,…

  • CVE-2022-21538LowJul 19, 2022
    NetApp
    Snapcenter
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2021-35588LowOct 20, 2021
    Fedoraproject
    Fedora
    risk 0.20cvss 3.1epss 0.04

    Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows…

  • CVE-2020-14798LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14796LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.20cvss 3.1epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2694LowJan 15, 2020
    NetApp
    Snapcenter
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.18 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2019-2945LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2019-2449LowJan 16, 2019
    NetApp
    Oncommand Unified Manager
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2019-2422LowJan 16, 2019
    NetApp
    Oncommand Unified Manager
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2017-10345LowOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.20cvss 3.1epss 0.02

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows…

  • CVE-2017-10193LowAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.20cvss 3.1epss 0.02

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2025-22866MedFeb 6, 2025
    NetApp
    NetApp
    risk 0.19cvss 4.0epss 0.00

    Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow…

  • CVE-2022-21486LowApr 19, 2022
    NetApp
    Snapcenter
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21485LowApr 19, 2022
    NetApp
    Snapcenter
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21484LowApr 19, 2022
    NetApp
    Snapcenter
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21357LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21355LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21333LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21331LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21325LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21324LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21323LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the…

  • CVE-2022-21321LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21319LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21317LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21313LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication…

  • CVE-2022-21312LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21311LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2021-34428LowJun 22, 2021
    Eclipse
    Jetty
    risk 0.19cvss 2.9epss 0.01

    For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can…

  • CVE-2019-13272HigKEVJul 17, 2019
    Linux
    Kernel
    risk 0.19cvss 7.8epss 0.52

    In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process…

  • CVE-2023-22113LowOct 17, 2023
    NetApp
    Oncommand Insight
    risk 0.18cvss 2.7epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…

Page 44 of 52