CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product netapp:h410s_firmware. Show all products

108 CVEs, showing 1 to 50Page 1 of 3Next
CVESeverityTitlePublished
CVE-2024-54085
Known exploited
Critical 10.0Redfish Authentication Bypass
Assigned by AMI
Mar 11, 2025
CVE-2025-0665High 7.0eventfd double close
Assigned by curl
Feb 5, 2025
CVE-2025-0167Low 3.4netrc and default credential leak
Assigned by curl
Feb 5, 2025
CVE-2024-11053Low 3.4netrc and redirect credential leak
Assigned by curl
Dec 11, 2024
CVE-2024-50602Medium 5.9An issue was discovered in libexpat before 2.6.4.
Assigned by mitre
Oct 27, 2024
CVE-2024-8096Medium 6.5OCSP stapling bypass with GnuTLS
Assigned by curl
Sep 11, 2024
CVE-2024-2466Medium 6.5TLS certificate check bypass with mbedTLS
Assigned by curl
Mar 27, 2024
CVE-2024-2379Medium 6.3QUIC certificate check bypass with wolfSSL
Assigned by curl
Mar 27, 2024
CVE-2024-2398High 8.6HTTP/2 push headers memory-leak
Assigned by curl
Mar 27, 2024
CVE-2024-2004Low 3.5Usage of disabled protocol
Assigned by curl
Mar 27, 2024
CVE-2024-28757High 7.5libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
Assigned by mitre
Mar 10, 2024
CVE-2024-1086
Known exploited
High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Jan 31, 2024
CVE-2023-4911
Known exploited
High 7.8Glibc: buffer overflow in ld.so leading to privilege escalation
Assigned by redhat
Oct 3, 2023
CVE-2023-4813Medium 5.9Glibc: potential use-after-free in gaih_inet()
Assigned by redhat
Sep 12, 2023
CVE-2023-4273Medium 6.0Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry
Assigned by redhat
Aug 9, 2023
CVE-2023-3212Medium 4.4A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel.
Assigned by redhat
Jun 23, 2023
CVE-2023-2953High 7.5A vulnerability was found in openldap.
Assigned by redhat
May 30, 2023
CVE-2023-2898Medium 4.7There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel.
Assigned by redhat
May 26, 2023
CVE-2023-2269Medium 4.4A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub…
Assigned by redhat
Apr 25, 2023
CVE-2023-27534High 8.8A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its inte…
Assigned by hackerone
Mar 30, 2023
CVE-2023-27535Medium 5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.
Assigned by hackerone
Mar 30, 2023
CVE-2023-27537Medium 5.9A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles".
Assigned by hackerone
Mar 30, 2023
CVE-2023-27538High 7.7An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr…
Assigned by hackerone
Mar 30, 2023
CVE-2023-27536Medium 5.9An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to che…
Assigned by hackerone
Mar 30, 2023
CVE-2023-27533Critical 9.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve…
Assigned by hackerone
Mar 30, 2023
CVE-2023-1077High 7.0In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition woul…
Assigned by redhat
Mar 27, 2023
CVE-2023-0386
Known exploited
High 7.8A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capabl…
Assigned by redhat
Mar 22, 2023
CVE-2023-23915Medium 6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel.
Assigned by hackerone
Feb 23, 2023
CVE-2023-23916Medium 6.5An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed mult…
Assigned by hackerone
Feb 23, 2023
CVE-2023-23914Critical 9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.
Assigned by hackerone
Feb 23, 2023
CVE-2022-47518High 7.8An issue was discovered in the Linux kernel before 6.0.11.
Assigned by mitre
Dec 18, 2022
CVE-2022-47520High 7.1An issue was discovered in the Linux kernel before 6.0.11.
Assigned by mitre
Dec 18, 2022
CVE-2022-35260Medium 6.5curl can be told to parse a `.netrc` file for credentials.
Assigned by hackerone
Dec 5, 2022
CVE-2022-32221Critical 9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same han…
Assigned by hackerone
Dec 5, 2022
CVE-2022-40304High 7.8An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 23, 2022
CVE-2022-40303High 7.5An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 22, 2022
CVE-2022-43945High 7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.
Assigned by SNPS
Nov 4, 2022
CVE-2022-42915High 8.1curl before 7.86.0 has a double free.
Assigned by mitre
Oct 29, 2022
CVE-2022-43680High 7.5In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
Assigned by mitre
Oct 24, 2022
CVE-2022-3649Low 3.1Linux Kernel BPF inode.c nilfs_new_inode use after free
Assigned by VulDB
Oct 21, 2022
CVE-2022-3545Medium 5.5Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free
Assigned by VulDB
Oct 17, 2022
CVE-2022-3564Medium 5.5Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free
Assigned by VulDB
Oct 17, 2022
CVE-2022-35252Low 3.7When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses.
Assigned by hackerone
Sep 23, 2022
CVE-2021-3999High 7.8A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2021-3998High 7.5A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2022-36123High 7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).
Assigned by mitre
Jul 29, 2022
CVE-2022-36879Medium 5.5An issue was discovered in the Linux kernel through 5.18.14.
Assigned by mitre
Jul 27, 2022
CVE-2022-2327High 7.5Use-after-free in io_uring ad work_flags in Linux Kernel
Assigned by Google
Jul 22, 2022
CVE-2022-32208Medium 5.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.
Assigned by hackerone
Jul 7, 2022
CVE-2022-32206Medium 6.5curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms.
Assigned by hackerone
Jul 7, 2022
Page 1 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.