Active Iq Unified Manager (Netapp) - vulnerabilities (CVEs)

850 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2025-04-15. Vendor: Netapp.

CVEs of Active Iq Unified Manager

CVE-2025-30722 - CVSS 6.8 (medium), 2025-04-15: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4…
CVE-2025-31672 - CVSS 5.3 (medium), 2025-04-09: Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are…
CVE-2025-24928 - CVSS 7.8 (high), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must…
CVE-2024-56171 - CVSS 9.8 (critical), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To…
CVE-2025-26465 - CVSS 6.8 (medium), 2025-02-18: A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine…
CVE-2025-1181 - CVSS 5 (medium), 2025-02-11: A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c…
CVE-2025-1178 - CVSS 6.3 (medium), 2025-02-11: A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file…
CVE-2025-24970 - CVSS 7.5 (high), 2025-02-10: Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.…
CVE-2025-0411 - CVSS 7 (high), 2025-01-25: 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected…
CVE-2025-21502 - CVSS 4.8 (medium), 2025-01-21: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2025-21492 - CVSS 4.9 (medium), 2025-01-21: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0.…
CVE-2024-52533 - CVSS 9.8 (critical), 2024-11-11: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a…
CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
CVE-2024-9823 - CVSS 7.5 (high), 2024-10-14: There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the…
CVE-2024-47554 - CVSS 4.3 (medium), 2024-10-03: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU…
CVE-2024-47561 - CVSS 9.2 (critical), 2024-10-03: Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to…
CVE-2024-7254 - CVSS 8.7 (high), 2024-09-19: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the…
CVE-2024-8096 - CVSS 6.5 (medium), 2024-09-11: When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it…
CVE-2024-8373 - CVSS 4.8 (medium), 2024-09-09: Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source…
CVE-2024-8372 - CVSS 4.8 (medium), 2024-09-09: Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to…
CVE-2024-6119 - CVSS 7.5 (high), 2024-09-03: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
CVE-2024-38808 - CVSS 4.3 (medium), 2024-08-20: In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression…
CVE-2024-21147 - CVSS 7.4 (high), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21140 - CVSS 4.8 (medium), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21138 - CVSS 3.7 (low), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21131 - CVSS 3.7 (low), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-6387 - CVSS 8.1 (high), 2024-07-01: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an…
CVE-2024-37891 - CVSS 6.5 (medium), 2024-06-17: urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only…
CVE-2024-30171 - CVSS 5.9 (medium), 2024-05-14: An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of…
CVE-2024-33600 - CVSS 5.9 (medium), 2024-05-06: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache,…
CVE-2024-2961 - CVSS 7.3 (high), 2024-04-17: The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the…
CVE-2024-21102 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and prior and…
CVE-2024-21101 - CVSS 2.2 (low), 2024-04-16: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.33 and prior, 7.6.29…
CVE-2024-21096 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21094 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21087 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.36 and…
CVE-2024-21085 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are…
CVE-2024-21069 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and…
CVE-2024-21068 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21061 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.35 and prior and…
CVE-2024-21062 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21060 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.36 and prior and…
CVE-2024-21056 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21055 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily…
CVE-2024-21051 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21054 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21050 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21053 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21052 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21047 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior.…
CVE-2024-21049 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily…
CVE-2024-21015 - CVSS 5.5 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior and 8.3.0 and…
CVE-2024-21012 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…
CVE-2024-21011 - CVSS 3.7 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21009 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21013 - CVSS 4.4 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21008 - CVSS 4.4 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-21005 - CVSS 3.1 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21004 - CVSS 2.5 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21003 - CVSS 3.1 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21002 - CVSS 2.5 (low), 2024-04-16: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are…
CVE-2024-21000 - CVSS 3.8 (low), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior…
CVE-2024-20998 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0…
CVE-2024-20994 - CVSS 5.3 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.36 and prior…
CVE-2024-20993 - CVSS 4.9 (medium), 2024-04-16: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0…
CVE-2024-2379 - CVSS 6.3 (medium), 2024-03-27: libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or…
CVE-2024-2398 - CVSS 8.6 (high), 2024-03-27: When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit…
CVE-2024-26641 - CVSS 8.6 (high), 2024-03-18: In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv()…
CVE-2024-22259 - CVSS 8.1 (high), 2024-03-16: Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation…
CVE-2024-28757 - CVSS 7.5 (high), 2024-03-10: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVE-2024-26458 - CVSS 5.3 (medium), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVE-2024-26462 - CVSS 5.5 (medium), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
CVE-2024-26461 - CVSS 7.5 (high), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
CVE-2024-22201 - CVSS 7.5 (high), 2024-02-26: Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An…
CVE-2024-22243 - CVSS 8.1 (high), 2024-02-23: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of…
CVE-2024-1635 - CVSS 7.5 (high), 2024-02-19: A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and…
CVE-2023-50868 - CVSS 7.5 (high), 2024-02-14: The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service…
CVE-2023-6516 - CVSS 7.5 (high), 2024-02-13: To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods,…
CVE-2023-5679 - CVSS 7.5 (high), 2024-02-13: A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features…
CVE-2023-5517 - CVSS 7.5 (high), 2024-02-13: A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - the…
CVE-2023-5680 - CVSS 5.3 (medium), 2024-02-13: If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can…
CVE-2024-0567 - CVSS 7.5 (high), 2024-01-16: A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating…
CVE-2023-31102 - CVSS 7.8 (high), 2023-11-03: Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
CVE-2023-5178 - CVSS 8.8 (high), 2023-11-01: A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux…
CVE-2023-38545 - CVSS 9.8 (critical), 2023-10-18: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow…
CVE-2023-45862 - CVSS 5.5 (medium), 2023-10-14: An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially…
CVE-2023-40745 - CVSS 6.5 (medium), 2023-10-05: LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an…
CVE-2023-41993 - CVSS 8.8 (high), 2023-09-21: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is…
CVE-2023-4813 - CVSS 5.9 (medium), 2023-09-12: A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash.…
CVE-2023-4863 - CVSS 8.8 (high), 2023-09-12: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write…
CVE-2023-41105 - CVSS 7.5 (high), 2023-08-23: An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated…
CVE-2022-48566 - CVSS 5.9 (medium), 2023-08-22: An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator…
CVE-2022-48564 - CVSS 6.5 (medium), 2023-08-22: read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property…
CVE-2021-32292 - CVSS 9.8 (critical), 2023-08-22: An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample…
CVE-2020-19189 - CVSS 6.5 (medium), 2023-08-22: Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service…
CVE-2020-19190 - CVSS 6.5 (medium), 2023-08-22: Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2020-19188 - CVSS 6.5 (medium), 2023-08-22: Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted…
CVE-2020-19187 - CVSS 6.5 (medium), 2023-08-22: Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted…
CVE-2020-19186 - CVSS 6.5 (medium), 2023-08-22: Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via…
CVE-2020-19185 - CVSS 6.5 (medium), 2023-08-22: Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via…