CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product netapp:h410c_firmware. Show all products

65 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2019-13272
Known exploited
High 7.8In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obta…
Assigned by mitre
Jul 17, 2019
CVE-2019-15219Medium 4.6An issue was discovered in the Linux kernel before 5.1.8.
Assigned by mitre
Aug 19, 2019
CVE-2019-15218Medium 4.6An issue was discovered in the Linux kernel before 5.1.8.
Assigned by mitre
Aug 19, 2019
CVE-2019-15217Medium 4.6An issue was discovered in the Linux kernel before 5.2.3.
Assigned by mitre
Aug 19, 2019
CVE-2019-2215
Known exploited
High 7.8A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.
Assigned by google_android
Oct 11, 2019
CVE-2020-7595High 7.5xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Assigned by mitre
Jan 21, 2020
CVE-2020-10029Medium 5.5The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen…
Assigned by mitre
Mar 4, 2020
CVE-2020-12243High 7.5In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Assigned by mitre
Apr 28, 2020
CVE-2020-11022
Healthcare
Medium 6.9jQuery has a potential XSS vulnerability
Assigned by GitHub_M
Apr 29, 2020
CVE-2020-11023
Known exploited
Healthcare
Medium 6.9Potential XSS vulnerability in jQuery
Assigned by GitHub_M
Apr 29, 2020
CVE-2020-1752High 7.0A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out.
Assigned by redhat
Apr 30, 2020
CVE-2020-12769Medium 5.5An issue was discovered in the Linux kernel before 5.4.17.
Assigned by mitre
May 9, 2020
CVE-2020-14155Medium 5.3libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
Assigned by mitre
Jun 15, 2020
CVE-2020-29374Low 3.6An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c.
Assigned by mitre
Nov 28, 2020
CVE-2020-27618Medium 5.5The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails t…
Assigned by mitre
Feb 26, 2021
CVE-2020-28097Medium 5.9The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback.
Assigned by mitre
Jun 24, 2021
CVE-2021-22555
Known exploited
High 8.3Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
Assigned by Google
Jul 7, 2021
CVE-2021-3541Medium 6.5A flaw was found in libxml2.
Assigned by redhat
Jul 9, 2021
CVE-2021-43618High 7.5GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platform…
Assigned by mitre
Nov 15, 2021
CVE-2021-43975Medium 6.7In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-…
Assigned by mitre
Nov 17, 2021
CVE-2021-34866High 8.8This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3.
Assigned by zdi
Jan 25, 2022
CVE-2021-22600
Known exploited
Medium 6.6Double Free in net/packet/af_packet.c leading to priviledge escalation
Assigned by Google
Jan 26, 2022
CVE-2022-0185
Known exploited
High 8.4A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length.
Assigned by redhat
Feb 11, 2022
CVE-2021-4090High 7.1An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel.
Assigned by redhat
Feb 18, 2022
CVE-2022-23308High 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Assigned by mitre
Feb 26, 2022
CVE-2022-0492
Known exploited
High 7.8A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.
Assigned by redhat
Mar 3, 2022
CVE-2022-0847
Known exploited
High 7.8A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus…
Assigned by redhat
Mar 7, 2022
CVE-2018-25032High 7.5zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Assigned by mitre
Mar 25, 2022
CVE-2022-0500High 7.8A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF.
Assigned by redhat
Mar 25, 2022
CVE-2022-0995
Known exploited
High 7.8An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem.
Assigned by redhat
Mar 25, 2022
CVE-2022-29824Medium 6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.
Assigned by mitre
May 3, 2022
CVE-2022-29155Critical 9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query.
Assigned by mitre
May 4, 2022
CVE-2022-1679High 7.8A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
Assigned by redhat
May 16, 2022
CVE-2022-1882High 7.8A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called.
Assigned by redhat
May 26, 2022
CVE-2022-32250High 7.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check l…
Assigned by mitre
Jun 2, 2022
CVE-2022-2068Critical 9.8The c_rehash script allows command injection
Assigned by openssl
Jun 21, 2022
CVE-2022-2274Critical 9.8RSA implementation bug in AVX512IFMA instructions
Assigned by openssl
Jul 1, 2022
CVE-2022-34918High 7.8An issue was discovered in the Linux kernel through 5.18.9.
Assigned by mitre
Jul 4, 2022
CVE-2022-2097Medium 5.3AES OCB fails to encrypt some bytes
Assigned by openssl
Jul 5, 2022
CVE-2022-2327High 7.5Use-after-free in io_uring ad work_flags in Linux Kernel
Assigned by Google
Jul 22, 2022
CVE-2022-36879Medium 5.5An issue was discovered in the Linux kernel through 5.18.14.
Assigned by mitre
Jul 27, 2022
CVE-2022-36123High 7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).
Assigned by mitre
Jul 29, 2022
CVE-2021-3999High 7.8A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2021-3998High 7.5A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2022-3545Medium 5.5Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free
Assigned by VulDB
Oct 17, 2022
CVE-2022-43680High 7.5In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
Assigned by mitre
Oct 24, 2022
CVE-2022-43945High 7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.
Assigned by SNPS
Nov 4, 2022
CVE-2022-40303High 7.5An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 22, 2022
CVE-2022-40304High 7.8An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 23, 2022
CVE-2022-47518High 7.8An issue was discovered in the Linux kernel before 6.0.11.
Assigned by mitre
Dec 18, 2022
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.