netapp

2,510 tracked vulnerabilities.

CVE-2021-2479 MEDIUM
MySQL Server <= 8.0.26 - Authenticated Denial of Service in DML Component
Oct 20, 2021
CVSS 4.9
EPSS 0.01
CVE-2021-2478 MEDIUM
MySQL < 8.0.26 - Authenticated Denial of Service in Server: DML
Oct 20, 2021
CVSS 4.9
EPSS 0.00
CVE-2021-37137 HIGH
Netty < 4.1.68 - Uncontrolled Resource Consumption via Snappy Frame Decoder
Oct 19, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-37136 HIGH
Netty < 4.1.68 - Denial of Service via Bzip2 Decompression OOME
Oct 19, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-27001 MEDIUM
Clustered Data ONTAP <9.5P18-9.9.1P2 - Privilege Escalation
Oct 19, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-29745 HIGH
IBM Cognos Analytics <11.2.0 - Privilege Escalation
Oct 15, 2021
CVSS 8.8
EPSS 0.00
CVE-2021-29679 HIGH
IBM Cognos Analytics 11.1.7 and 11.2.0 - Authenticated Remote Code Execution via SSI Directive Injection
Oct 15, 2021
CVSS 8.8
EPSS 0.01
CVE-2021-42340 HIGH
Apache Tomcat 8.5.60-8.5.71, 9.0.40-9.0.53, 10.0.0-M1-10.0.11, 10.1.0-M1-10.1.0-M5 Memory Leak via WebSocket
Oct 14, 2021
CVSS 7.5
EPSS 0.04
CVE-2021-3671 MEDIUM
Samba < 4.13.12 - Authenticated Denial of Service via Missing sname in TGS-REQ
Oct 12, 2021
CVSS 6.5
EPSS 0.03
CVE-2021-27003 MEDIUM
Clustered Data ONTAP <9.5P18, 9.6P15, 9.7P14, 9.8P5, 9.9.1 - XSS
Oct 12, 2021
CVSS 4.7
EPSS 0.00
CVE-2021-42252 HIGH
Linux kernel <5.14.6 - Privilege Escalation
Oct 11, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-27002 HIGH
NetApp Cloud Manager <3.9.10 - Info Disclosure
Oct 11, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-42013 CRITICAL KEVNUCLEI
Apache HTTP Server 2.4.49-2.4.50 - Path Traversal and Remote Code Execution via Alias-like Directives
Oct 07, 2021
CVSS 9.8
EPSS 0.94
CVE-2021-22930 CRITICAL
Node.js <16.6.0, 14.17.4, 12.22.4 - Use After Free
Oct 07, 2021
CVSS 9.8
EPSS 0.00
CVE-2021-41773 CRITICAL KEVNUCLEI
Apache 2.4.49/2.4.50 Traversal RCE
Oct 05, 2021
CVSS 9.8
EPSS 0.94
CVE-2021-41524 HIGH
Apache HTTP Server 2.4.49 - Denial of Service via HTTP/2 Request Processing
Oct 05, 2021
CVSS 7.5
EPSS 0.07
CVE-2021-42008 HIGH
Linux Kernel 2.6.12-4.4.282 - Authenticated Out-of-bounds Write in 6pack Decode Function
Oct 05, 2021
CVSS 7.8
EPSS 0.01
CVE-2021-32765 HIGH
hiredis < 1.0.1 - Integer Overflow via Malicious RESP Multi-Bulk Protocol Data
Oct 04, 2021
CVSS 8.8
EPSS 0.01
CVE-2021-41099 HIGH
Redis <6.2.6/<6.0.16/<5.0.14 - Heap Corruption via proto-max-bulk-len
Oct 04, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-32762 HIGH
Redis 5.0.0-5.0.13 - Integer Overflow in Multi-Bulk Reply Parsing
Oct 04, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-32687 HIGH
Redis <6.2.6/<6.0.16/<5.0.14 - Heap Corruption via set-max-intset-entries
Oct 04, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-32675 HIGH
Redis 5.0.0-5.0.13 - Unauthenticated Denial of Service via RESP Request Memory Allocation
Oct 04, 2021
CVSS 7.5
EPSS 0.03
CVE-2021-32672 MEDIUM
Redis <6.2.6-5.0.14 - Use After Free
Oct 04, 2021
CVSS 5.3
EPSS 0.00
CVE-2021-32628 HIGH
Redis 5.0.0-5.0.13 - Remote Code Execution via Ziplist Integer Overflow
Oct 04, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-32627 HIGH
Redis 5.0.0-5.0.13 - Remote Code Execution via Integer Overflow in Stream Elements
Oct 04, 2021
CVSS 7.5
EPSS 0.01
Products
oncommand_insight 971 active_iq_unified_manager 848 oncommand_workflow_automation 743 snapcenter 575 cloud_backup 345 h700s_firmware 289 h300s_firmware 288 h410s_firmware 288 h500s_firmware 288 e-series_santricity_os_controller 242 h410c_firmware 236 steelstore_cloud_integrated_storage 211 solidfire 192 clustered_data_ontap 187 hci_management_node 182 snapmanager 180 ontap_select_deploy_administration_utility 179 oncommand_unified_manager 169 h700e_firmware 149 h300e_firmware 148 h500e_firmware 148 e-series_santricity_storage_manager 140 storage_automation_store 113 solidfire_\&_hci_management_node 103 element_software 100 e-series_santricity_web_services 99 oncommand_balance 83 santricity_unified_manager 77 7-mode_transition_tool 75 oncommand_performance_manager 73
Quick Filters
Critical CVEs With Exploits In CISA KEV