Cloud Backup (Netapp) - vulnerabilities (CVEs)

349 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-05-03. Vendor: Netapp.

CVEs of Cloud Backup

CVE-2023-28656 - CVSS 8.1 (high), 2023-05-03: NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software…
CVE-2021-33068 - CVSS 6.5 (medium), 2022-02-09: Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via…
CVE-2021-0115 - CVSS 6.7 (medium), 2022-02-09: Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2021-0118 - CVSS 6.7 (medium), 2022-02-09: Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0125 - CVSS 6.6 (medium), 2022-02-09: Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical…
CVE-2021-0117 - CVSS 7.8 (high), 2022-02-09: Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0124 - CVSS 6.6 (medium), 2022-02-09: Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical…
CVE-2021-0116 - CVSS 7.8 (high), 2022-02-09: Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0119 - CVSS 6.2 (medium), 2022-02-09: Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical…
CVE-2021-0156 - CVSS 7.8 (high), 2022-02-09: Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via…
CVE-2021-0091 - CVSS 7.8 (high), 2022-02-09: Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via…
CVE-2021-0099 - CVSS 7.8 (high), 2022-02-09: Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of…
CVE-2021-0111 - CVSS 6.7 (medium), 2022-02-09: NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local…
CVE-2021-0093 - CVSS 4.4 (medium), 2022-02-09: Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local…
CVE-2021-0107 - CVSS 6.7 (medium), 2022-02-09: Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2021-0092 - CVSS 4.4 (medium), 2022-02-09: Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
CVE-2021-0103 - CVSS 6.7 (medium), 2022-02-09: Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege…
CVE-2021-0060 - CVSS 6.6 (medium), 2022-02-09: Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0,…
CVE-2021-44790 - CVSS 9.8 (critical), 2021-12-20: A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is…
CVE-2021-4044 - CVSS 7.5 (high), 2021-12-14: Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative…
CVE-2021-43527 - CVSS 9.8 (critical), 2021-12-08: NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures.…
CVE-2018-25020 - CVSS 7.8 (high), 2021-12-08: The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require…
CVE-2021-43976 - CVSS 4.6 (medium), 2021-11-17: In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device)…
CVE-2021-43975 - CVSS 6.7 (medium), 2021-11-17: In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can…
CVE-2021-42376 - CVSS 5.5 (medium), 2021-11-15: A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03…
CVE-2021-42375 - CVSS 5.5 (medium), 2021-11-15: An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell…
CVE-2021-42374 - CVSS 5.3 (medium), 2021-11-15: An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This…
CVE-2021-42377 - CVSS 9.8 (critical), 2021-11-15: An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command,…
CVE-2021-42373 - CVSS 5.5 (medium), 2021-11-15: A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given
CVE-2017-5123 - CVSS 8.8 (high), 2021-11-02: Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
CVE-2021-25219 - CVSS 5.3 (medium), 2021-10-27: In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as…
CVE-2021-42252 - CVSS 7.8 (high), 2021-10-11: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the…
CVE-2021-42013 - CVSS 9.8 (critical), 2021-10-07: It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files…
CVE-2021-41773 - CVSS 9.8 (critical), 2021-10-05: A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files…
CVE-2021-41524 - CVSS 7.5 (high), 2021-10-05: While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server.…
CVE-2021-41864 - CVSS 7.8 (high), 2021-10-02: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer…
CVE-2021-22947 - CVSS 5.9 (medium), 2021-09-29: When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and…
CVE-2021-22946 - CVSS 7.5 (high), 2021-09-29: A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command…
CVE-2021-22945 - CVSS 9.1 (critical), 2021-09-23: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and…
CVE-2021-38300 - CVSS 7.8 (high), 2021-09-20: arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing…
CVE-2021-41073 - CVSS 7.8 (high), 2021-09-19: loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a…
CVE-2021-40438 - CVSS 9 (critical), 2021-09-16: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server…
CVE-2021-39275 - CVSS 9.8 (critical), 2021-09-16: ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but…
CVE-2021-36160 - CVSS 7.5 (high), 2021-09-16: A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server…
CVE-2021-34798 - CVSS 7.5 (high), 2021-09-16: Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-3634 - CVSS 6.5 (medium), 2021-08-31: A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them…
CVE-2021-22923 - CVSS 5.3 (medium), 2021-08-05: When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same…
CVE-2021-22922 - CVSS 6.5 (medium), 2021-08-05: When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink…
CVE-2021-22925 - CVSS 5.3 (medium), 2021-08-05: curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs…
CVE-2021-22924 - CVSS 3.7 (low), 2021-08-05: libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic,…
CVE-2021-32785 - CVSS 7.5 (high), 2021-07-22: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating…
CVE-2021-3541 - CVSS 6.5 (medium), 2021-07-09: A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
CVE-2021-3612 - CVSS 7.8 (high), 2021-07-09: An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl…
CVE-2021-22555 - CVSS 8.3 (high), 2021-07-07: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a…
CVE-2021-28691 - CVSS 7.8 (high), 2021-06-29: Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate…
CVE-2020-28097 - CVSS 5.9 (medium), 2021-06-24: The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
CVE-2021-22901 - CVSS 8.1 (high), 2021-06-11: curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over…
CVE-2021-22897 - CVSS 5.3 (medium), 2021-06-11: curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is…
CVE-2021-26691 - CVSS 9.8 (critical), 2021-06-10: In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
CVE-2020-13938 - CVSS 5.5 (medium), 2021-06-10: Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows
CVE-2020-8700 - CVSS 6.7 (medium), 2021-06-09: Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local…
CVE-2020-8670 - CVSS 6.4 (medium), 2021-06-09: Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-8703 - CVSS 6.7 (medium), 2021-06-09: Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and…
CVE-2020-12357 - CVSS 6.7 (medium), 2021-06-09: Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-12360 - CVSS 7.8 (high), 2021-06-09: Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-12359 - CVSS 6.8 (medium), 2021-06-09: Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of…
CVE-2020-12358 - CVSS 4.4 (medium), 2021-06-09: Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVE-2020-24486 - CVSS 5.5 (medium), 2021-06-09: Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
CVE-2019-25045 - CVSS 7.8 (high), 2021-06-07: An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.
CVE-2021-3520 - CVSS 9.8 (critical), 2021-06-02: There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling…
CVE-2021-33200 - CVSS 7.8 (high), 2021-05-27: kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused…
CVE-2020-25669 - CVSS 7.8 (high), 2021-05-26: A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the…
CVE-2020-25668 - CVSS 7 (high), 2021-05-26: A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
CVE-2020-25670 - CVSS 7.8 (high), 2021-05-26: A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.
CVE-2021-22543 - CVSS 8.7 (high), 2021-05-26: An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while…
CVE-2020-25673 - CVSS 5.5 (medium), 2021-05-26: A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
CVE-2020-25671 - CVSS 7.8 (high), 2021-05-26: A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.
CVE-2021-33574 - CVSS 9.8 (critical), 2021-05-25: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object…
CVE-2020-25672 - CVSS 7.5 (high), 2021-05-25: A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
CVE-2021-31440 - CVSS 8.8 (high), 2021-05-21: This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability…
CVE-2021-3426 - CVSS 5.7 (medium), 2021-05-20: There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server…
CVE-2021-3483 - CVSS 7.8 (high), 2021-05-17: A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a…
CVE-2019-25044 - CVSS 7.8 (high), 2021-05-14: The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege…
CVE-2021-23134 - CVSS 7.8 (high), 2021-05-12: Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations,…
CVE-2021-32399 - CVSS 7 (high), 2021-05-10: net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
CVE-2020-13529 - CVSS 6.1 (medium), 2021-05-10: An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to…
CVE-2020-35519 - CVSS 7.8 (high), 2021-05-06: An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a…
CVE-2021-3501 - CVSS 7.1 (high), 2021-05-06: A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated…
CVE-2021-29489 - CVSS 7.6 (high), 2021-05-05: Highcharts JS is a JavaScript charting library based on SVG. In Highcharts versions 8 and earlier, the chart options structure was not systematically filtered…
CVE-2021-31879 - CVSS 6.1 (medium), 2021-04-29: GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
CVE-2021-25216 - CVSS 9.8 (critical), 2021-04-29: In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well…
CVE-2021-25215 - CVSS 7.5 (high), 2021-04-29: In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well…
CVE-2021-25214 - CVSS 6.5 (medium), 2021-04-29: In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview…
CVE-2021-23133 - CVSS 7 (high), 2021-04-22: A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network…
CVE-2021-3506 - CVSS 7.1 (high), 2021-04-19: An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check…
CVE-2021-29154 - CVSS 7.8 (high), 2021-04-08: BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the…
CVE-2021-20284 - CVSS 5.5 (medium), 2021-03-26: A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of…
CVE-2021-20197 - CVSS 6.3 (medium), 2021-03-26: There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these…
CVE-2021-28971 - CVSS 5.5 (medium), 2021-03-22: In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as…
CVE-2021-28972 - CVSS 6.7 (medium), 2021-03-22: In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new…