Netapp H500e Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Netapp H500e Firmware: 32 record(s), with affected versions and fixes.cpe:2.3:o:netapp:h500e_firmware
CVE-2021-33574
Critical · 9.8
CWE-416 May 25, 2021
The mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
CVE-2020-27618
Medium · 5.5
CWE-835 Feb 26, 2021
Infinite Loop in Gnu Glibc
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.
CVE-2020-12769
Medium · 5.5
CWE-662 May 9, 2020
Improper Synchronization in Linux Linux Kernel
An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.
CVE-2020-11023
Medium · 6.1
KEV High · 67 Public exploit CWE-79 Apr 29, 2020
JQuery Cross-Site Scripting (XSS) Vulnerability
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-12243
High · 7.5
CWE-674 Apr 28, 2020
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
CVE-2020-7595
High · 7.5
CWE-835 Jan 21, 2020
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
CVE-2019-20388
High · 7.5
CWE-401 Jan 21, 2020
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.