VYPR
← NetApp

Vendor CVEs

NetApp

All CVEs

2,598 total · sorted by risk
  • CVE-2015-7886LowJan 18, 2016
    NetApp
    Data Ontap
    risk 0.24cvss 3.7epss 0.02

    NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors.

  • CVE-2024-37372LowJan 9, 2025
    NetApp
    NetApp
    risk 0.23cvss 3.6epss 0.00

    The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

  • CVE-2024-2004LowMar 27, 2024
    Curl
    Curl
    risk 0.23cvss 3.5epss 0.02

    When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext…

  • CVE-2021-26988LowMar 4, 2021
    NetApp
    Data Ontap
    risk 0.23cvss 3.5epss 0.00

    Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM)…

  • CVE-2020-8589LowFeb 3, 2021
    NetApp
    Clustered Data Ontap
    risk 0.23cvss 3.5epss 0.01

    Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines (SVMs) and filenames on those SVMs.

  • CVE-2020-8588LowFeb 3, 2021
    NetApp
    Clustered Data Ontap
    risk 0.23cvss 3.5epss 0.01

    Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Machines (SVMs).

  • CVE-2018-1842LowNov 9, 2018
    IBM
    Cognos Analytics
    risk 0.23cvss 3.6epss 0.00

    IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.

  • CVE-2025-0167LowFeb 5, 2025
    Curl
    Curl
    risk 0.22cvss 3.4epss 0.01

    When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both…

  • CVE-2024-43374MedAug 16, 2024
    Vim
    Vim
    risk 0.22cvss 4.5epss 0.00

    The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it…

  • CVE-2024-37891MedJun 17, 2024
    Urllib3
    Urllib3
    risk 0.22cvss 4.4epss 0.01

    urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support,…

  • CVE-2021-2372MedJul 21, 2021
    Fedoraproject
    Fedora
    risk 0.22cvss 4.4epss 0.03

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…

  • CVE-2020-35448LowDec 27, 2020
    GNU
    Binutils
    risk 0.22cvss 3.3epss 0.01

    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in…

  • CVE-2018-16866LowJan 11, 2019
    Systemd Project
    Systemd
    risk 0.22cvss 3.3epss 0.01

    An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

  • CVE-2018-3284MedOct 17, 2018
    MariaDB
    MariaDB
    risk 0.22cvss 4.4epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…

  • CVE-2018-2771MedApr 19, 2018
    MariaDB
    MariaDB
    risk 0.22cvss 4.4epss 0.04

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access…

  • CVE-2024-47554MedOct 3, 2024
    Apache
    Commons Io
    risk 0.21cvss 4.3epss 0.01

    Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users…

  • CVE-2024-38808MedAug 20, 2024
    VMware
    Spring Framework
    risk 0.21cvss 4.3epss 0.01

    In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when…

  • CVE-2024-39908MedJul 16, 2024
    Ruby Lang
    Rexml
    risk 0.21cvss 4.3epss 0.01

    REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`, `0` and `%>`. If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. The REXML gem 3.3.2…

  • CVE-2020-4951LowOct 15, 2021
    IBM
    Cognos Analytics
    risk 0.21cvss 3.3epss 0.00

    IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information.

  • CVE-2021-22555HigKEVJul 7, 2021
    Linux
    Kernel
    risk 0.21cvss 8.3epss 0.79

    A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

  • CVE-2020-24512LowJun 9, 2021
    Intel
    Processors
    risk 0.21cvss 3.3epss 0.00

    Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

  • CVE-2020-8590LowFeb 8, 2021
    NetApp
    Clustered Data Ontap
    risk 0.21cvss 3.3epss 0.00

    Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

  • CVE-2020-8578LowFeb 8, 2021
    NetApp
    Clustered Data Ontap
    risk 0.21cvss 3.3epss 0.00

    Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

  • CVE-2019-3823MedFeb 6, 2019
    Curl
    Libcurl
    risk 0.21cvss 4.3epss 0.04

    libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set to 5,…

  • CVE-2018-3058MedJul 18, 2018
    MariaDB
    MariaDB
    risk 0.21cvss 4.3epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2016-8612MedMar 9, 2018
    Apache
    HTTP Server
    risk 0.21cvss 4.3epss 0.04

    Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.

  • CVE-2025-22134MedJan 13, 2025
    Vim
    Vim
    risk 0.20cvss 4.2epss 0.00

    When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will…

  • CVE-2024-21005LowApr 16, 2024
    NetApp
    Oncommand Insight
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability…

  • CVE-2024-21003LowApr 16, 2024
    NetApp
    Oncommand Insight
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability…

  • CVE-2023-22048LowJul 18, 2023
    Fedoraproject
    Fedora
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2023-22006LowJul 18, 2023
    NetApp
    Oncommand Insight
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10,…

  • CVE-2022-21538LowJul 19, 2022
    NetApp
    Snapcenter
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2021-35588LowOct 20, 2021
    Fedoraproject
    Fedora
    risk 0.20cvss 3.1epss 0.04

    Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows…

  • CVE-2020-14798LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14796LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.20cvss 3.1epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2694LowJan 15, 2020
    NetApp
    Snapcenter
    risk 0.20cvss 3.1epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.18 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2019-2945LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2019-2449LowJan 16, 2019
    NetApp
    Oncommand Unified Manager
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2019-2422LowJan 16, 2019
    NetApp
    Oncommand Unified Manager
    risk 0.20cvss 3.1epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2017-10345LowOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.20cvss 3.1epss 0.02

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows…

  • CVE-2017-10193LowAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.20cvss 3.1epss 0.02

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2025-22866MedFeb 6, 2025
    NetApp
    NetApp
    risk 0.19cvss 4.0epss 0.00

    Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow…

  • CVE-2022-21486LowApr 19, 2022
    NetApp
    Snapcenter
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21485LowApr 19, 2022
    NetApp
    Snapcenter
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21484LowApr 19, 2022
    NetApp
    Snapcenter
    risk 0.19cvss 2.9epss 0.02

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21357LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21355LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21333LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21331LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2022-21325LowJan 19, 2022
    NetApp
    Oncommand Insight
    risk 0.19cvss 2.9epss 0.01

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

Page 44 of 52