CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product netapp:ontap_select_deploy_administration_utility. Show all products

83 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2025-0167Low 3.4netrc and default credential leak
Assigned by curl
Feb 5, 2025
CVE-2024-11053Low 3.4netrc and redirect credential leak
Assigned by curl
Dec 11, 2024
CVE-2024-8096Medium 6.5OCSP stapling bypass with GnuTLS
Assigned by curl
Sep 11, 2024
CVE-2024-6387High 8.1Openssh: regresshion - race condition in ssh allows rce/dos
Assigned by redhat
Jul 1, 2024
CVE-2024-2379Medium 6.3QUIC certificate check bypass with wolfSSL
Assigned by curl
Mar 27, 2024
CVE-2024-2398High 8.6HTTP/2 push headers memory-leak
Assigned by curl
Mar 27, 2024
CVE-2024-2004Low 3.5Usage of disabled protocol
Assigned by curl
Mar 27, 2024
CVE-2023-4911
Known exploited
High 7.8Glibc: buffer overflow in ld.so leading to privilege escalation
Assigned by redhat
Oct 3, 2023
CVE-2023-20900High 7.1A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual ma…
Assigned by vmware
Aug 31, 2023
CVE-2023-24329High 7.5An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
Assigned by mitre
Feb 17, 2023
CVE-2023-0361High 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.
Assigned by redhat
Feb 15, 2023
CVE-2023-25136Medium 6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.
Assigned by mitre
Feb 3, 2023
CVE-2022-40303High 7.5An issue was discovered in libxml2 before 2.10.3.
Assigned by mitre
Nov 22, 2022
CVE-2022-45061High 7.5An issue was discovered in Python before 3.11.1.
Assigned by mitre
Nov 9, 2022
CVE-2020-35527Critical 9.8In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
Assigned by redhat
Sep 1, 2022
CVE-2021-4189Medium 5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.
Assigned by redhat
Aug 24, 2022
CVE-2021-3999High 7.8A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2021-3998High 7.5A flaw was found in glibc.
Assigned by redhat
Aug 24, 2022
CVE-2022-37434Critical 9.8zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.
Assigned by mitre
Aug 5, 2022
CVE-2022-35737High 7.5SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
Assigned by mitre
Aug 3, 2022
CVE-2022-2097Medium 5.3AES OCB fails to encrypt some bytes
Assigned by openssl
Jul 5, 2022
CVE-2022-2068Critical 9.8The c_rehash script allows command injection
Assigned by openssl
Jun 21, 2022
CVE-2022-29824Medium 6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.
Assigned by mitre
May 3, 2022
CVE-2015-20107High 7.8In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file.
Assigned by mitre
Apr 13, 2022
CVE-2018-25032High 7.5zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Assigned by mitre
Mar 25, 2022
CVE-2022-26488High 7.0In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured.
Assigned by mitre
Mar 7, 2022
CVE-2021-3733Medium 6.5There's a flaw in urllib's AbstractBasicAuthHandler class.
Assigned by redhat
Mar 7, 2022
CVE-2021-3737High 7.5A flaw was found in python.
Assigned by redhat
Mar 4, 2022
CVE-2022-23308High 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Assigned by mitre
Feb 26, 2022
CVE-2022-24407High 8.8In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
Assigned by mitre
Feb 23, 2022
CVE-2022-0563Medium 5.5A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support.
Assigned by redhat
Feb 21, 2022
CVE-2022-0391High 7.5A flaw was found in Python, specifically within the urllib.parse module.
Assigned by redhat
Feb 9, 2022
CVE-2021-41617High 7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected.
Assigned by mitre
Sep 26, 2021
CVE-2021-3580High 7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext.
Assigned by redhat
Aug 5, 2021
CVE-2021-37600Medium 5.5An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/se…
Assigned by mitre
Jul 28, 2021
CVE-2021-35942Critical 9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially r…
Assigned by mitre
Jul 22, 2021
CVE-2021-3541Medium 6.5A flaw was found in libxml2.
Assigned by redhat
Jul 9, 2021
CVE-2021-3520Critical 9.8There's a flaw in lz4.
Assigned by redhat
Jun 2, 2021
CVE-2021-3516High 7.8There's a flaw in libxml2's xmllint in versions before 2.9.11.
Assigned by redhat
Jun 1, 2021
CVE-2021-3426Medium 5.7There's a flaw in Python 3's pydoc.
Assigned by redhat
May 20, 2021
CVE-2021-3517High 8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.
Assigned by redhat
May 19, 2021
CVE-2021-3518High 8.8There's a flaw in libxml2 in versions before 2.9.11.
Assigned by redhat
May 18, 2021
CVE-2021-3537Medium 5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference.
Assigned by redhat
May 14, 2021
CVE-2021-31879Medium 6.1GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
Assigned by mitre
Apr 29, 2021
CVE-2021-20305High 8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply fun…
Assigned by redhat
Apr 5, 2021
CVE-2021-3450High 7.4CA certificate check bypass with X509_V_FLAG_X509_STRICT
Assigned by openssl
Mar 25, 2021
CVE-2021-3449Medium 5.9NULL pointer deref in signature_algorithms processing
Assigned by openssl
Mar 25, 2021
CVE-2020-27618Medium 5.5The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails t…
Assigned by mitre
Feb 26, 2021
CVE-2021-23336Medium 5.9Web Cache Poisoning
Assigned by snyk
Feb 15, 2021
CVE-2021-3326High 7.5The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts th…
Assigned by mitre
Jan 27, 2021
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.