Netapp Hci Compute Node vulnerabilities

51 CVEs affecting Netapp Hci Compute Node, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-27423, published 2025-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-13272: Linux Kernel Improper Privilege Management Vulnerability, published 2019-07-17. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 52.2% chance of exploitation in the next 30 days. In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to…
CVE-2024-2961, published 2024-04-17. High severity, CVSS 7.3. EPSS: 88.3% chance of exploitation in the next 30 days. The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may…
CVE-2022-34169, published 2022-07-19. High severity, CVSS 7.5. EPSS: 81.8% chance of exploitation in the next 30 days. The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal…
CVE-2022-21449, published 2022-04-19. High severity, CVSS 7.5. EPSS: 77.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle…
CVE-2017-5715, published 2018-01-04. Medium severity, CVSS 5.6. EPSS: 74% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel…
CVE-2018-25032, published 2022-03-25. High severity, CVSS 7.5. EPSS: 51.7% chance of exploitation in the next 30 days. zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2025-27423, published 2025-03-03. High severity, CVSS 7.1. EPSS: 22.5% chance of exploitation in the next 30 days. Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858,…
CVE-2022-37434, published 2022-08-05. Critical severity, CVSS 9.8. EPSS: 19% chance of exploitation in the next 30 days. zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected.…
CVE-2019-1559, published 2019-02-27. Medium severity, CVSS 5.9. EPSS: 17.1% chance of exploitation in the next 30 days. If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling…
CVE-2020-15778, published 2020-07-24. High severity, CVSS 7.4. EPSS: 13.7% chance of exploitation in the next 30 days. scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that…

Latest

CVE-2025-24928, published 2025-02-18. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted…
CVE-2024-56171, published 2025-02-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be…
CVE-2025-26603, published 2025-02-18. Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days. Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables and files. It also allows to show the…
CVE-2025-0509, published 2025-02-04. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.
CVE-2024-40896, published 2024-12-23. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by…
CVE-2024-53580, published 2024-12-18. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
CVE-2024-3447, published 2024-11-14. Medium severity, CVSS 6.0. EPSS: 0.6% chance of exploitation in the next 30 days. A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an…
CVE-2024-50602, published 2024-10-27. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
CVE-2024-41965, published 2024-08-01. Medium severity, CVSS 4.2. EPSS: 0.3% chance of exploitation in the next 30 days. Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user…