Netapp Hci Baseboard Management Controller vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Netapp Hci Baseboard Management Controller: 10 record(s), with affected versions and fixes.cpe:2.3:a:netapp:hci_baseboard_management_controller
CVE-2025-0725
High · 7.3
CWE-120 Feb 5, 2025
gzip integer overflow
When libcurl is asked to perform automatic gzip decompression of
content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,
**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would
make libcurl perform a buffer overflow.
CVE-2023-3141
High · 7.1
CWE-416 Jun 9, 2023
A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in...
A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.
CVE-2023-32233
High · 7.8
CWE-416 May 8, 2023
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch...
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
CVE-2023-26607
High · 7.1
CWE-125 Feb 26, 2023
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
CVE-2023-23559
High · 7.8
CWE-190 Jan 12, 2023
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there...
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
CVE-2022-41222
High · 7.0
CWE-416 Sep 21, 2022
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an...
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
CVE-2021-46143
High · 7.8
CWE-190 Jan 6, 2022
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVE-2021-45960
High · 8.8
CWE-682 Jan 1, 2022
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
CVE-2020-11023
Medium · 6.1
KEV High · 67 Public exploit CWE-79 Apr 29, 2020
JQuery Cross-Site Scripting (XSS) Vulnerability
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-19054
Medium · 4.7
CWE-401 Nov 18, 2019
Missing Release of Memory after Effective Lifetime in Linux Linux Kernel
A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.