InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product netapp:h410c_firmware. Show all products

65 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2024-54085
Known exploited
Critical 10.0Redfish Authentication Bypass
Assigned by AMI
Mar 11, 2025
CVE-2025-0665High 7.0eventfd double close
Assigned by curl
Feb 5, 2025
CVE-2025-0167Low 3.4netrc and default credential leak
Assigned by curl
Feb 5, 2025
CVE-2024-50602Medium 5.9An issue was discovered in libexpat before 2.6.4.
Assigned by mitre
Oct 27, 2024
CVE-2024-28757High 7.5libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
Assigned by mitre
Mar 10, 2024
CVE-2024-1086
Known exploited
High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Jan 31, 2024
CVE-2023-4911
Known exploited
High 7.8Glibc: buffer overflow in ld.so leading to privilege escalation
Assigned by redhat
Oct 3, 2023
CVE-2023-4813Medium 5.9Glibc: potential use-after-free in gaih_inet()
Assigned by redhat
Sep 12, 2023
CVE-2023-3212Medium 4.4A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel.
Assigned by redhat
Jun 23, 2023
CVE-2023-2953High 7.5A vulnerability was found in openldap.
Assigned by redhat
May 30, 2023
CVE-2023-2898Medium 4.7There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel.
Assigned by redhat
May 26, 2023
CVE-2023-2269Medium 4.4A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub…
Assigned by redhat
Apr 25, 2023
CVE-2023-1077High 7.0In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition woul…
Assigned by redhat
Mar 27, 2023
CVE-2023-0386
Known exploited
High 7.8A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capabl…
Assigned by redhat
Mar 22, 2023
CVE-2022-47518High 7.8An issue was discovered in the Linux kernel before 6.0.11.
Assigned by mitre
Dec 18, 2022
CVE-2022-47520High 7.1An issue was discovered in the Linux kernel before 6.0.11.
Assigned by mitre
Dec 18, 2022
CVE-2022-40304High 7.8An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 23, 2022
CVE-2022-40303High 7.5An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 22, 2022
CVE-2022-43945High 7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.
Assigned by SNPS
Nov 4, 2022
CVE-2022-43680High 7.5In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
Assigned by mitre
Oct 24, 2022
CVE-2022-3545Medium 5.5Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free
Assigned by VulDB
Oct 17, 2022
CVE-2021-3999High 7.8A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2021-3998High 7.5A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2022-36123High 7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).
Assigned by mitre
Jul 29, 2022
CVE-2022-36879Medium 5.5An issue was discovered in the Linux kernel through 5.18.14.
Assigned by mitre
Jul 27, 2022
CVE-2022-2327High 7.5Use-after-free in io_uring ad work_flags in Linux Kernel
Assigned by Google
Jul 22, 2022
CVE-2022-2097Medium 5.3AES OCB fails to encrypt some bytes
Assigned by openssl
Jul 5, 2022
CVE-2022-34918High 7.8An issue was discovered in the Linux kernel through 5.18.9.
Assigned by mitre
Jul 4, 2022
CVE-2022-2274Critical 9.8RSA implementation bug in AVX512IFMA instructions
Assigned by openssl
Jul 1, 2022
CVE-2022-2068Critical 9.8The c_rehash script allows command injection
Assigned by openssl
Jun 21, 2022
CVE-2022-32250High 7.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check l…
Assigned by mitre
Jun 2, 2022
CVE-2022-1882High 7.8A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called.
Assigned by redhat
May 26, 2022
CVE-2022-1679High 7.8A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
Assigned by redhat
May 16, 2022
CVE-2022-29155Critical 9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query.
Assigned by mitre
May 4, 2022
CVE-2022-29824Medium 6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.
Assigned by mitre
May 3, 2022
CVE-2022-0995
Known exploited
High 7.8An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem.
Assigned by redhat
Mar 25, 2022
CVE-2022-0500High 7.8A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF.
Assigned by redhat
Mar 25, 2022
CVE-2018-25032High 7.5zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Assigned by mitre
Mar 25, 2022
CVE-2022-0847
Known exploited
High 7.8A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus…
Assigned by redhat
Mar 7, 2022
CVE-2022-0492
Known exploited
High 7.8A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.
Assigned by redhat
Mar 3, 2022
CVE-2022-23308High 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Assigned by mitre
Feb 26, 2022
CVE-2021-4090High 7.1An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel.
Assigned by redhat
Feb 18, 2022
CVE-2022-0185
Known exploited
High 8.4A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length.
Assigned by redhat
Feb 11, 2022
CVE-2021-22600
Known exploited
Medium 6.6Double Free in net/packet/af_packet.c leading to priviledge escalation
Assigned by Google
Jan 26, 2022
CVE-2021-34866High 8.8This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3.
Assigned by zdi
Jan 25, 2022
CVE-2021-43975Medium 6.7In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-…
Assigned by mitre
Nov 17, 2021
CVE-2021-43618High 7.5GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platform…
Assigned by mitre
Nov 15, 2021
CVE-2021-3541Medium 6.5A flaw was found in libxml2.
Assigned by redhat
Jul 9, 2021
CVE-2021-22555
Known exploited
High 8.3Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
Assigned by Google
Jul 7, 2021
CVE-2020-28097Medium 5.9The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback.
Assigned by mitre
Jun 24, 2021
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.