CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,443
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product netapp:snapmanager. Show all products

31 CVEs, showing 1 to 31
CVESeverityTitlePublished
CVE-2016-9841Critical 9.8inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
Assigned by microfocus
May 23, 2017
CVE-2018-11212Medium 6.5An issue was discovered in libjpeg 9a and 9d.
Assigned by mitre
May 16, 2018
CVE-2020-26217High 8.8XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream.Nov 16, 2020
CVE-2021-3517High 8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.
Assigned by redhat
May 19, 2021
CVE-2021-29505High 8.8XStream is software for serializing Java objects to XML and back again.May 28, 2021
CVE-2021-39144
Known exploited
High 8.5XStream is vulnerable to a Remote Command Execution attack
Assigned by GitHub_M
Aug 23, 2021
CVE-2021-39139High 8.8XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39141High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39145High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39146High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39147High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39148High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39149High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39151High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39153High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39154High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39140Medium 6.3XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39150High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2021-39152High 8.5XStream is a simple library to serialize objects to XML and back again.Aug 23, 2021
CVE-2022-23302
Healthcare
High 8.8Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
Assigned by apache
Jan 18, 2022
CVE-2022-23305
Healthcare
Critical 9.8SQL injection in JDBC Appender in Apache Log4j V1
Assigned by apache
Jan 18, 2022
CVE-2022-23308High 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Assigned by mitre
Feb 26, 2022
CVE-2022-22968Medium 5.3In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectivel…
Assigned by vmware
Apr 14, 2022
CVE-2022-29824Medium 6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.
Assigned by mitre
May 3, 2022
CVE-2022-1292Critical 9.8The c_rehash script allows command injection
Assigned by openssl
May 3, 2022
CVE-2022-1343Medium 5.3OCSP_basic_verify may incorrectly verify the response signing certificate
Assigned by openssl
May 3, 2022
CVE-2022-1434Medium 5.9Incorrect MAC key used in the RC4-MD5 ciphersuite
Assigned by openssl
May 3, 2022
CVE-2022-1473High 7.5Resource leakage when decoding certificates and keys
Assigned by openssl
May 3, 2022
CVE-2022-2068Critical 9.8The c_rehash script allows command injection
Assigned by openssl
Jun 21, 2022
CVE-2022-40303High 7.5An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 22, 2022
CVE-2022-40304High 7.8An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 23, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.