CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product netapp:cloud_backup. Show all products

81 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2021-43975Medium 6.7In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-…
Assigned by mitre
Nov 17, 2021
CVE-2021-42013
Known exploited
Critical 9.8Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
Assigned by apache
Oct 7, 2021
CVE-2021-41773
Known exploited
High 7.5Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
Assigned by apache
Oct 5, 2021
CVE-2021-22947Medium 5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c…
Assigned by hackerone
Sep 29, 2021
CVE-2021-22946High 7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSES…
Assigned by hackerone
Sep 29, 2021
CVE-2021-22945Critical 9.1When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call t…
Assigned by hackerone
Sep 23, 2021
CVE-2021-40438
Known exploited
Critical 9.0mod_proxy SSRF
Assigned by apache
Sep 16, 2021
CVE-2021-22924Low 3.7libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take…
Assigned by hackerone
Aug 5, 2021
CVE-2021-22925Medium 5.3curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl.
Assigned by hackerone
Aug 5, 2021
CVE-2021-22923Medium 5.3When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to e…
Assigned by hackerone
Aug 5, 2021
CVE-2021-22922Medium 6.5When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to…
Assigned by hackerone
Aug 5, 2021
CVE-2021-3541Medium 6.5A flaw was found in libxml2.
Assigned by redhat
Jul 9, 2021
CVE-2021-22555
Known exploited
High 8.3Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
Assigned by Google
Jul 7, 2021
CVE-2020-28097Medium 5.9The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback.
Assigned by mitre
Jun 24, 2021
CVE-2021-22897Medium 5.3curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library.
Assigned by hackerone
Jun 11, 2021
CVE-2021-22901High 8.1curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection.
Assigned by hackerone
Jun 11, 2021
CVE-2020-12360High 7.8Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.Jun 9, 2021
CVE-2020-12359Medium 6.8Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.Jun 9, 2021
CVE-2020-24486Medium 5.5Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
Assigned by intel
Jun 9, 2021
CVE-2020-12358Medium 4.4Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
Assigned by intel
Jun 9, 2021
CVE-2020-8700Medium 6.7Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Assigned by intel
Jun 9, 2021
CVE-2020-8670Medium 6.4Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Assigned by intel
Jun 9, 2021
CVE-2020-12357Medium 6.7Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Assigned by intel
Jun 9, 2021
CVE-2021-3520Critical 9.8There's a flaw in lz4.
Assigned by redhat
Jun 2, 2021
CVE-2021-33574Critical 9.8The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free.
Assigned by mitre
May 25, 2021
CVE-2021-3426Medium 5.7There's a flaw in Python 3's pydoc.
Assigned by redhat
May 20, 2021
CVE-2020-13529Medium 6.1An exploitable denial-of-service vulnerability exists in Systemd 245.
Assigned by talos
May 10, 2021
CVE-2021-31879Medium 6.1GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
Assigned by mitre
Apr 29, 2021
CVE-2021-28972Medium 6.7In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace…
Assigned by mitre
Mar 22, 2021
CVE-2021-28041High 7.1ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an…
Assigned by mitre
Mar 5, 2021
CVE-2021-27219High 7.5An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.
Assigned by mitre
Feb 15, 2021
CVE-2021-27218High 7.5An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.
Assigned by mitre
Feb 15, 2021
CVE-2021-23336Medium 5.9Web Cache Poisoning
Assigned by snyk
Feb 15, 2021
CVE-2021-3156
Known exploited
High 7.8Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…
Assigned by mitre
Jan 26, 2021
CVE-2020-36183High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
Assigned by mitre
Jan 6, 2021
CVE-2020-36185High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36186High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36187High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36188High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36189High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSo…
Assigned by mitre
Jan 6, 2021
CVE-2020-35507Medium 5.5There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to caus…
Assigned by redhat
Jan 4, 2021
CVE-2020-35496Medium 5.5There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereferen…
Assigned by redhat
Jan 4, 2021
CVE-2020-35495Medium 5.5There's a flaw in binutils /bfd/pef.c.
Assigned by redhat
Jan 4, 2021
CVE-2020-35494Medium 6.1There's a flaw in binutils /opcodes/tic4x-dis.c.
Assigned by redhat
Jan 4, 2021
CVE-2020-35493Medium 5.5A flaw exists in binutils in bfd/pef.c.
Assigned by redhat
Jan 4, 2021
CVE-2020-25692High 7.5A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.
Assigned by redhat
Dec 8, 2020
CVE-2020-29573High 7.5sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long…
Assigned by mitre
Dec 5, 2020
CVE-2020-28196High 7.5MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite l…
Assigned by mitre
Nov 6, 2020
CVE-2020-14155Medium 5.3libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
Assigned by mitre
Jun 15, 2020
CVE-2020-13871High 7.5SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Assigned by mitre
Jun 6, 2020
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.