Hci Compute Node (Netapp) - vulnerabilities (CVEs)

38 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-03-03. Vendor: Netapp.

CVEs of Hci Compute Node

CVE-2025-27423 - CVSS 7.1 (high), 2025-03-03: Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or…
CVE-2025-24928 - CVSS 7.8 (high), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must…
CVE-2024-56171 - CVSS 9.8 (critical), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To…
CVE-2025-26603 - CVSS 4.2 (medium), 2025-02-18: Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables…
CVE-2025-0509 - CVSS 7.3 (high), 2025-02-04: A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s…
CVE-2024-40896 - CVSS 9.1 (critical), 2024-12-23: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers…
CVE-2024-53580 - CVSS 7.5 (high), 2024-12-18: iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
CVE-2024-3447 - CVSS 6 (medium), 2024-11-14: A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer`…
CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
CVE-2024-41965 - CVSS 4.2 (medium), 2024-08-01: Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do…
CVE-2024-36958 - CVSS 9.8 (critical), 2024-05-30: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is…
CVE-2024-2961 - CVSS 7.3 (high), 2024-04-17: The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the…
CVE-2023-48706 - CVSS 4.7 (medium), 2023-11-22: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using…
CVE-2023-0049 - CVSS 7.8 (high), 2023-01-04: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
CVE-2022-37434 - CVSS 9.8 (critical), 2022-08-05: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications…
CVE-2022-36946 - CVSS 7.5 (high), 2022-07-27: nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in…
CVE-2022-21549 - CVSS 5.3 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
CVE-2022-21541 - CVSS 5.9 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
CVE-2022-21540 - CVSS 5.3 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
CVE-2022-34169 - CVSS 7.5 (high), 2022-07-19: The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java…
CVE-2022-2048 - CVSS 7.5 (high), 2022-07-07: In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly…
CVE-2022-2047 - CVSS 2.7 (low), 2022-07-07: In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme…
CVE-2022-27779 - CVSS 5.3 (medium), 2022-06-02: libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send…
CVE-2022-27781 - CVSS 7.5 (high), 2022-06-02: libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous…
CVE-2022-30594 - CVSS 7.8 (high), 2022-05-12: The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the…
CVE-2022-21449 - CVSS 7.5 (high), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
CVE-2018-25032 - CVSS 7.5 (high), 2022-03-25: zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2021-3772 - CVSS 6.5 (medium), 2022-03-02: A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the…
CVE-2022-0391 - CVSS 7.5 (high), 2022-02-09: A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The…
CVE-2021-2161 - CVSS 5.9 (medium), 2021-04-22: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that…
CVE-2021-2163 - CVSS 5.3 (medium), 2021-04-22: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that…
CVE-2021-22876 - CVSS 5.3 (medium), 2021-04-01: curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP…
CVE-2021-26932 - CVSS 5.5 (medium), 2021-02-17: An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of…
CVE-2020-1971 - CVSS 5.9 (medium), 2020-12-08: The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a…
CVE-2020-29369 - CVSS 7 (high), 2020-11-28: An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and…
CVE-2019-17006 - CVSS 9.8 (critical), 2020-10-22: In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library…
CVE-2020-25221 - CVSS 7.8 (high), 2020-09-10: get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate…
CVE-2020-15778 - CVSS 7.8 (high), 2020-07-24: scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.…
CVE-2020-14145 - CVSS 5.9 (medium), 2020-06-29: The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows…
CVE-2020-10690 - CVSS 6.5 (medium), 2020-05-08: There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a…
CVE-2020-12465 - CVSS 6.7 (medium), 2020-04-29: An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An…
CVE-2020-12464 - CVSS 6.7 (medium), 2020-04-29: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka…
CVE-2019-19462 - CVSS 5.5 (medium), 2019-11-30: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL…
CVE-2019-19069 - CVSS 7.5 (high), 2019-11-18: A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of…
CVE-2019-19050 - CVSS 7.5 (high), 2019-11-18: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of…
CVE-2019-18805 - CVSS 9.8 (critical), 2019-11-07: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in…
CVE-2019-13272 - CVSS 7.8 (high), 2019-07-17: In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace…
CVE-2019-11815 - CVSS 8.1 (high), 2019-05-08: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related…
CVE-2018-20836 - CVSS 8.1 (high), 2019-05-07: An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in…
CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
CVE-2017-5715 - CVSS 5.6 (medium), 2018-01-04: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker…