netapp

2,510 tracked vulnerabilities.

CVE-2024-21012 LOW
Oracle GraalVM and JDK - Unauthenticated Data Manipulation via Networking Component
Apr 16, 2024
CVSS 3.7
EPSS 0.00
CVE-2024-21011 LOW
Oracle GraalVM and JDK - Unauthenticated Partial Denial of Service via Hotspot Component
Apr 16, 2024
CVSS 3.7
EPSS 0.00
CVE-2024-21009 MEDIUM
MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service in Optimizer
Apr 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-21008 MEDIUM
MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service in Optimizer
Apr 16, 2024
CVSS 4.4
EPSS 0.00
CVE-2024-21005 LOW
Oracle Java SE <8u401 & Oracle GraalVM EE <21.3.9 - Info Disclosure
Apr 16, 2024
CVSS 3.1
EPSS 0.00
CVE-2024-21004 LOW
Oracle GraalVM 20.3.13, 21.3.9 and Oracle Java SE 8u401 - Unauthenticated Incorrect Default Permissions in JavaFX
Apr 16, 2024
CVSS 2.5
EPSS 0.00
CVE-2024-21003 LOW
Oracle Java SE <8u401, Oracle GraalVM EE <21.3.9 - Info Disclosure
Apr 16, 2024
CVSS 3.1
EPSS 0.00
CVE-2024-21002 LOW
Oracle GraalVM 20.3.13, 21.3.9 and Oracle Java SE 8u401 - Unauthenticated Incorrect Default Permissions in JavaFX
Apr 16, 2024
CVSS 2.5
EPSS 0.00
CVE-2024-21000 LOW
Oracle MySQL <8.0.36 and <8.3.0 - Privilege Escalation
Apr 16, 2024
CVSS 3.8
EPSS 0.00
CVE-2024-20998 MEDIUM
MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service via Server Optimizer
Apr 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-20994 MEDIUM
MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service in Information Schema
Apr 16, 2024
CVSS 5.3
EPSS 0.00
CVE-2024-20993 MEDIUM
MySQL Server <= 8.0.35 and 8.2.0 - Authenticated Denial of Service in Server Optimizer
Apr 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-32487 HIGH
less < 653 - OS Command Execution via Newline in Filename
Apr 13, 2024
CVSS 8.6
EPSS 0.00
CVE-2024-2312 MEDIUM
GRUB2 < 2.12-1ubuntu5 - Use-After-Free in peimage Module
Apr 05, 2024
CVSS 6.7
EPSS 0.00
CVE-2024-27316 HIGH
Apache HTTP Server 2.4.17-2.4.58 - Denial of Service via HTTP/2 Header Buffering
Apr 04, 2024
CVSS 7.5
EPSS 0.88
CVE-2024-24795 MEDIUM
Apache HTTP Server 2.4.0-2.4.58 - HTTP Response Splitting via Malicious Response Headers
Apr 04, 2024
CVSS 6.3
EPSS 0.01
CVE-2024-26735 MEDIUM
Linux Kernel 4.10-6.6.18 IPv6 Segment Routing Null Pointer Dereference
Apr 03, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-26733 MEDIUM
Linux Kernel >=2.6.12 <5.10.211 - Out-of-bounds Write in arp_req_get()
Apr 03, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-2466 MEDIUM
libcurl - SSL/TLS Certificate Check Bypass
Mar 27, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-2398 HIGH
curl 7.44.0-8.6.0 - Memory Leak via HTTP/2 Server Push Header Limit Abort
Mar 27, 2024
CVSS 8.6
EPSS 0.02
CVE-2024-2379 MEDIUM
curl - Improper Certificate Validation in wolfSSL QUIC Connection
Mar 27, 2024
CVSS 6.3
EPSS 0.00
CVE-2024-2004 LOW
curl 7.85.0-8.6.0 - Protocol Filter Bypass via Empty Protocol Set
Mar 27, 2024
CVSS 3.5
EPSS 0.01
CVE-2024-29131 HIGH
Apache Commons Configuration 2.0-2.10.0 - Out-of-bounds Write
Mar 21, 2024
CVSS 7.3
EPSS 0.00
CVE-2024-26641 MEDIUM
Linux Kernel 4.7-6.7.4 - Use of Uninitialized Resource in IP6 Tunnel Receiver
Mar 18, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-26633 MEDIUM
Linux Kernel 4.10-4.19.305, 4.20-5.4.267, 5.5-5.10.208 - Uninitialized Memory Read in ip6_tnl_parse_tlv_enc_lim
Mar 18, 2024
CVSS 5.5
EPSS 0.00
Products
oncommand_insight 971 active_iq_unified_manager 848 oncommand_workflow_automation 743 snapcenter 575 cloud_backup 345 h700s_firmware 289 h300s_firmware 288 h410s_firmware 288 h500s_firmware 288 e-series_santricity_os_controller 242 h410c_firmware 236 steelstore_cloud_integrated_storage 211 solidfire 192 clustered_data_ontap 187 hci_management_node 182 snapmanager 180 ontap_select_deploy_administration_utility 179 oncommand_unified_manager 169 h700e_firmware 149 h300e_firmware 148 h500e_firmware 148 e-series_santricity_storage_manager 140 storage_automation_store 113 solidfire_\&_hci_management_node 103 element_software 100 e-series_santricity_web_services 99 oncommand_balance 83 santricity_unified_manager 77 7-mode_transition_tool 75 oncommand_performance_manager 73
Quick Filters
Critical CVEs With Exploits In CISA KEV