Netapp

H700s Firmware

285 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-43618

Exploit
  • EPSS 0.5%
  • Published 15.11.2021 04:15:06
  • Last modified 21.11.2024 06:29:31

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

9.8

CVE-2021-43267

Exploit
  • EPSS 72.71%
  • Published 02.11.2021 23:15:07
  • Last modified 21.11.2024 06:28:57

An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO mes...

8.8

CVE-2017-5123

  • EPSS 1.98%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 03:27:06

Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.

7.8

CVE-2021-43057

Exploit
  • EPSS 0.16%
  • Published 28.10.2021 04:15:08
  • Last modified 21.11.2024 06:28:37

An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be used by local attackers to cause memory corruption and escalate privileges, aka CID-a3727a8bac...

5.3

CVE-2021-25219

  • EPSS 0.52%
  • Published 27.10.2021 21:15:07
  • Last modified 21.11.2024 05:54:34

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken ...

6.1

CVE-2021-41182

Exploit
  • EPSS 22.27%
  • Published 26.10.2021 15:15:10
  • Last modified 21.11.2024 06:25:41

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any str...

6.1

CVE-2021-41183

Exploit
  • EPSS 2.34%
  • Published 26.10.2021 15:15:10
  • Last modified 21.11.2024 06:25:42

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The v...

6.1

CVE-2021-41184

  • EPSS 22.09%
  • Published 26.10.2021 15:15:10
  • Last modified 21.11.2024 06:25:42

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string v...

6.7

CVE-2021-42327

  • EPSS 0.25%
  • Published 21.10.2021 17:15:07
  • Last modified 21.11.2024 06:27:36

dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There a...

7.8

CVE-2021-42252

  • EPSS 0.09%
  • Published 11.10.2021 19:15:07
  • Last modified 21.11.2024 06:27:27

An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute pr...