Netapp Hci Compute Node Firmware vulnerabilities

34 CVEs affecting Netapp Hci Compute Node Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24014, published 2025-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22901, published 2021-06-11. High severity, CVSS 8.1. EPSS: 63.5% chance of exploitation in the next 30 days. curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use…
CVE-2021-20322, published 2022-02-18. High severity, CVSS 7.4. EPSS: 6.9% chance of exploitation in the next 30 days. A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw…
CVE-2019-19052, published 2019-11-18. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering…
CVE-2021-3733, published 2022-03-10. Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days. There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression…
CVE-2021-22897, published 2021-06-11. Medium severity, CVSS 5.3. EPSS: 4.3% chance of exploitation in the next 30 days. curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The…
CVE-2019-19044, published 2019-11-18. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by…
CVE-2022-27778, published 2022-06-02. High severity, CVSS 8.1. EPSS: 3.8% chance of exploitation in the next 30 days. A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.
CVE-2021-45485, published 2021-12-25. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that…
CVE-2019-19060, published 2019-11-18. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka…
CVE-2021-28041, published 2021-03-05. High severity, CVSS 7.1. EPSS: 3.5% chance of exploitation in the next 30 days. ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an…

Latest

CVE-2025-24014, published 2025-01-20. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in…
CVE-2022-43680, published 2022-10-24. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
CVE-2022-21434, published 2022-04-19. Medium severity, CVSS 5.3. EPSS: 2.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321,…
CVE-2022-21426, published 2022-04-19. Medium severity, CVSS 5.3. EPSS: 3.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14,…
CVE-2022-28893, published 2022-04-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.
CVE-2022-28796, published 2022-04-08. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.