Netapp

Cloud Backup

349 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-32785

  • EPSS 2.73%
  • Veröffentlicht 22.07.2021 22:15:08
  • Zuletzt bearbeitet 21.11.2024 06:07:44

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. When mod_auth_openidc versions prior to 2.4.9 are co...

6.5

CVE-2021-3541

  • EPSS 1.96%
  • Veröffentlicht 09.07.2021 17:15:07
  • Zuletzt bearbeitet 21.11.2024 06:21:48

A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

7.8

CVE-2021-3612

  • EPSS 0.69%
  • Veröffentlicht 09.07.2021 11:15:09
  • Zuletzt bearbeitet 21.11.2024 06:21:58

An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privi...

7.8

CVE-2021-22555

Warnung Exploit
  • EPSS 78.68%
  • Veröffentlicht 07.07.2021 12:15:08
  • Zuletzt bearbeitet 27.10.2025 17:06:32

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

7.8

CVE-2021-28691

  • EPSS 0.36%
  • Veröffentlicht 29.06.2021 12:15:08
  • Zuletzt bearbeitet 21.11.2024 06:00:09

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malfor...

5.9

CVE-2020-28097

Exploit
  • EPSS 0.52%
  • Veröffentlicht 24.06.2021 12:15:07
  • Zuletzt bearbeitet 21.11.2024 05:22:21

The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.

8.1

CVE-2021-22901

Exploit
  • EPSS 60.12%
  • Veröffentlicht 11.06.2021 16:15:11
  • Zuletzt bearbeitet 21.11.2024 05:50:52

curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentia...

5.3

CVE-2021-22897

Exploit
  • EPSS 2.98%
  • Veröffentlicht 11.06.2021 16:15:10
  • Zuletzt bearbeitet 28.05.2026 21:16:27

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" ...

5.5

CVE-2020-13938

  • EPSS 11.87%
  • Veröffentlicht 10.06.2021 07:15:07
  • Zuletzt bearbeitet 21.11.2024 05:02:11

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

9.8

CVE-2021-26691

  • EPSS 68.29%
  • Veröffentlicht 10.06.2021 07:15:07
  • Zuletzt bearbeitet 21.11.2024 05:56:41

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow