Element Software
NetApp · 100 CVEs
netrc and default credential leak
Feb 5, 2025
nscd: netgroup cache assumes NSS callback uses in-buffer strings
May 6, 2024
python: CPU denial of service via inefficient IDNA decoder
Nov 9, 2022
curl: Incorrect handling of control code characters in cookies
Sep 23, 2022
curl: FTP-KRB bad message verification
Jul 7, 2022
curl: Unpreserved file permissions
Jul 7, 2022
curl: HTTP compression denial of service
Jul 7, 2022
curl: Set-Cookie denial of service
Jul 7, 2022
The c_rehash script allows command injection
Jun 21, 2022
kernel: improper update of sock reference in TCP pacing can lead to memory leak
May 25, 2022
OpenJDK: URI parsing inconsistencies (JNDI, 8278972)
Apr 19, 2022
OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)
Apr 19, 2022
OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)
Apr 19, 2022
kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses
Mar 25, 2022
kernel: a race out-of-bound read in vt
Feb 16, 2022
kernel: incorrect connection-setup ordering allows operators of remote NFSv4 servers to cause a DoS
Aug 8, 2021
kernel: slab-out-of-bounds access in xdr_set_page_base() in net/sunrpc/xdr.c
Aug 8, 2021
kernel: out-of-bounds read in TRACE_EVENT() in fs/nfsd/trace.h by sending NFS traffic when the trace event framework is…
Aug 8, 2021
kernel: btrfs: deadlock via processes that trigger allocation of new system chunks during times when there is a shortag…
Aug 8, 2021
kernel: data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the bu…
Aug 7, 2021
kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcoun…
Nov 28, 2020
ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS
Jun 4, 2020
kernel: usb: gadget: illegal array access in binding with UDC
May 18, 2020
Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario
May 15, 2020
kernel: DoS via concurrent calls to dw_spi_irq and dw_spi_transfer_one functions in drivers/spi/spi-dw.c
May 9, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-0167 | netrc and default credential leak | LOW | 0.69% | Feb 5, 2025 |
| CVE-2024-33602 | nscd: netgroup cache assumes NSS callback uses in-buffer strings | HIGH | 0.40% | May 6, 2024 |
| CVE-2022-45061 | python: CPU denial of service via inefficient IDNA decoder | HIGH | 2.65% | Nov 9, 2022 |
| CVE-2022-35252 | curl: Incorrect handling of control code characters in cookies | LOW | 2.43% | Sep 23, 2022 |
| CVE-2022-32208 | curl: FTP-KRB bad message verification | MEDIUM | 7.50% | Jul 7, 2022 |
| CVE-2022-32207 | curl: Unpreserved file permissions | CRITICAL | 7.74% | Jul 7, 2022 |
| CVE-2022-32206 | curl: HTTP compression denial of service | MEDIUM | 33.10% | Jul 7, 2022 |
| CVE-2022-32205 | curl: Set-Cookie denial of service | MEDIUM | 27.90% | Jul 7, 2022 |
| CVE-2022-2068 | The c_rehash script allows command injection | CRITICAL | 95.40% | Jun 21, 2022 |
| CVE-2022-1678 | kernel: improper update of sock reference in TCP pacing can lead to memory leak | HIGH | 2.94% | May 25, 2022 |
| CVE-2022-21496 | OpenJDK: URI parsing inconsistencies (JNDI, 8278972) | MEDIUM | 2.75% | Apr 19, 2022 |
| CVE-2022-21476 | OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) | HIGH | 4.05% | Apr 19, 2022 |
| CVE-2022-21443 | OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) | LOW | 2.72% | Apr 19, 2022 |
| CVE-2021-4203 | kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses | MEDIUM | 1.75% | Mar 25, 2022 |
| CVE-2021-3753 | kernel: a race out-of-bound read in vt | MEDIUM | 0.36% | Feb 16, 2022 |
| CVE-2021-38199 | kernel: incorrect connection-setup ordering allows operators of remote NFSv4 servers to cause a DoS | MEDIUM | 1.24% | Aug 8, 2021 |
| CVE-2021-38201 | kernel: slab-out-of-bounds access in xdr_set_page_base() in net/sunrpc/xdr.c | HIGH | 3.36% | Aug 8, 2021 |
| CVE-2021-38202 | kernel: out-of-bounds read in TRACE_EVENT() in fs/nfsd/trace.h by sending NFS traffic when the trace event framework is being used for nfsd | HIGH | 3.19% | Aug 8, 2021 |
| CVE-2021-38203 | kernel: btrfs: deadlock via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info | MEDIUM | 0.36% | Aug 8, 2021 |
| CVE-2021-38160 | kernel: data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console… | HIGH | 0.40% | Aug 7, 2021 |
| CVE-2020-29368 | kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check | HIGH | 0.36% | Nov 28, 2020 |
| CVE-2020-13817 | ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS | HIGH | 3.25% | Jun 4, 2020 |
| CVE-2020-13143 | kernel: usb: gadget: illegal array access in binding with UDC | MEDIUM | 5.19% | May 18, 2020 |
| CVE-2020-12888 | Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario | MEDIUM | 0.40% | May 15, 2020 |
| CVE-2020-12769 | kernel: DoS via concurrent calls to dw_spi_irq and dw_spi_transfer_one functions in drivers/spi/spi-dw.c | MEDIUM | 0.65% | May 9, 2020 |
Showing 1 to 25 of 100 CVEs