[ Vendor · 11 CVEs ]
Netapp
CVEs affecting Netapp published in the last 30 days, plus any Netapp CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-22061 | 9 Oct 2026 | CVSS 8.2 | NetApp TridentTrident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to… | |
| CVE-2026-22056 | 28 Aug 2026 | CVSS 2.3 | NetApp StorageGRIDStorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of… | Fix |
| CVE-2024-38475 | 1 Jul 2024 | CVSS 9.1 | Apache HTTP Server Improper Escaping of OutputImproper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are… | ExploitedFix |
| CVE-2023-41993 | 21 Sep 2023 | CVSS 8.8 | Apple Multiple Products WebKit Code ExecutionThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution… | Exploited |
| CVE-2023-29552 | 25 Apr 2023 | CVSS 7.5 | Service Location Protocol (SLP) Denial-of-ServiceThe Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the… | Exploited |
| CVE-2021-3156 | 26 Jan 2021 | CVSS 7.8 | Sudo Heap-Based Buffer OverflowSudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via… | ExploitedFix |
| CVE-2019-13272 | 17 Jul 2019 | CVSS 7.8 | Linux Kernel Improper Privilege ManagementIn the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a… | ExploitedFix |
| CVE-2016-5195 | 10 Nov 2016 | CVSS 7.0 | Linux Kernel Race ConditionRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of… | ExploitedFix |
| CVE-2016-3427 | 21 Apr 2016 | CVSS 9.8 | Oracle Java SE and JRockit UnspecifiedUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect… | ExploitedFix |
| CVE-2015-5477 | 29 Jul 2015 | CVSS 7.5 | Crafted TKEY queries crash ISC BIND DNS serversnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and… | ExploitedFix |
| CVE-2010-1871 | 5 Aug 2010 | CVSS 8.8 | Red Hat Linux JBoss Seam 2 Remote Code ExecutionJBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss… | Exploited |