CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,432 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,432
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product netapp:active_iq_unified_manager. Show all products

135 CVEs, showing 1 to 50Page 1 of 3Next
CVESeverityTitlePublished
CVE-2025-0411
Known exploited
High 7.07-Zip Mark-of-the-Web Bypass Vulnerability
Assigned by zdi
Jan 25, 2025
CVE-2024-52533Critical 9.8gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
Assigned by mitre
Nov 11, 2024
CVE-2024-50602Medium 5.9An issue was discovered in libexpat before 2.6.4.
Assigned by mitre
Oct 27, 2024
CVE-2024-8096Medium 6.5OCSP stapling bypass with GnuTLS
Assigned by curl
Sep 11, 2024
CVE-2024-6387High 8.1Openssh: regresshion - race condition in ssh allows rce/dos
Assigned by redhat
Jul 1, 2024
CVE-2024-2379Medium 6.3QUIC certificate check bypass with wolfSSL
Assigned by curl
Mar 27, 2024
CVE-2024-2398High 8.6HTTP/2 push headers memory-leak
Assigned by curl
Mar 27, 2024
CVE-2024-28757High 7.5libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
Assigned by mitre
Mar 10, 2024
CVE-2024-1635High 7.5A vulnerability was found in Undertow.Feb 19, 2024
CVE-2024-0567High 7.5Gnutls: rejects certificate chain with distributed trust
Assigned by redhat
Jan 16, 2024
CVE-2023-5178High 8.8Kernel: use after free in nvmet_tcp_free_crypto in nvme
Assigned by redhat
Nov 1, 2023
CVE-2023-41993
Known exploited
High 8.8The issue was addressed with improved checks.
Assigned by apple
Sep 21, 2023
CVE-2023-4813Medium 5.9Glibc: potential use-after-free in gaih_inet()
Assigned by redhat
Sep 12, 2023
CVE-2023-4863
Known exploited
High 8.8Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
Assigned by Chrome
Sep 12, 2023
CVE-2021-32292Critical 9.8An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726.
Assigned by mitre
Aug 22, 2023
CVE-2020-19190Medium 6.5Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Assigned by mitre
Aug 22, 2023
CVE-2020-19189Medium 6.5Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Assigned by mitre
Aug 22, 2023
CVE-2020-19185Medium 6.5Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Assigned by mitre
Aug 22, 2023
CVE-2020-19187Medium 6.5Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Assigned by mitre
Aug 22, 2023
CVE-2020-19186Medium 6.5Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Assigned by mitre
Aug 22, 2023
CVE-2020-19188Medium 6.5Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Assigned by mitre
Aug 22, 2023
CVE-2023-3338Medium 6.5Crash due to a null pointer dereference in the dn_nsp_send function
Assigned by redhat
Jun 30, 2023
CVE-2023-2953High 7.5A vulnerability was found in openldap.
Assigned by redhat
May 30, 2023
CVE-2023-27534High 8.8A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its inte…
Assigned by hackerone
Mar 30, 2023
CVE-2023-27535Medium 5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.
Assigned by hackerone
Mar 30, 2023
CVE-2023-27537Medium 5.9A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles".
Assigned by hackerone
Mar 30, 2023
CVE-2023-27538High 7.7An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr…
Assigned by hackerone
Mar 30, 2023
CVE-2023-27536Medium 5.9An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to che…
Assigned by hackerone
Mar 30, 2023
CVE-2023-27533Critical 9.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve…
Assigned by hackerone
Mar 30, 2023
CVE-2023-23915Medium 6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel.
Assigned by hackerone
Feb 23, 2023
CVE-2023-23914Critical 9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.
Assigned by hackerone
Feb 23, 2023
CVE-2023-24329High 7.5An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
Assigned by mitre
Feb 17, 2023
CVE-2023-0361High 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.
Assigned by redhat
Feb 15, 2023
CVE-2022-43551High 7.5A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.
Assigned by hackerone
Dec 23, 2022
CVE-2022-40304High 7.8An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 23, 2022
CVE-2022-40303High 7.5An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 22, 2022
CVE-2022-45061High 7.5An issue was discovered in Python before 3.11.1.
Assigned by mitre
Nov 9, 2022
CVE-2022-43945High 7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.
Assigned by SNPS
Nov 4, 2022
CVE-2022-43680High 7.5In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
Assigned by mitre
Oct 24, 2022
CVE-2022-3649Low 3.1Linux Kernel BPF inode.c nilfs_new_inode use after free
Assigned by VulDB
Oct 21, 2022
CVE-2021-4209Medium 6.5A NULL pointer dereference flaw was found in GnuTLS.
Assigned by redhat
Aug 24, 2022
CVE-2022-37434Critical 9.8zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.
Assigned by mitre
Aug 5, 2022
CVE-2022-36879Medium 5.5An issue was discovered in the Linux kernel through 5.18.14.
Assigned by mitre
Jul 27, 2022
CVE-2022-36946High 7.5nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one…
Assigned by mitre
Jul 27, 2022
CVE-2022-2097Medium 5.3AES OCB fails to encrypt some bytes
Assigned by openssl
Jul 5, 2022
CVE-2022-27778High 8.1A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.
Assigned by hackerone
Jun 1, 2022
CVE-2022-22970Medium 5.3In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a Multipar…
Assigned by vmware
May 12, 2022
CVE-2022-1473High 7.5Resource leakage when decoding certificates and keys
Assigned by openssl
May 3, 2022
CVE-2022-1434Medium 5.9Incorrect MAC key used in the RC4-MD5 ciphersuite
Assigned by openssl
May 3, 2022
CVE-2022-1343Medium 5.3OCSP_basic_verify may incorrectly verify the response signing certificate
Assigned by openssl
May 3, 2022
Page 1 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.