Netapp Hci h410c Firmware vulnerabilities

7 CVEs affecting Netapp Hci h410c Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-2961, published 2024-04-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-2961, published 2024-04-17. High severity, CVSS 7.3. EPSS: 88.3% chance of exploitation in the next 30 days. The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may…
CVE-2021-3518, published 2021-05-18. High severity, CVSS 8.8. EPSS: 21.9% chance of exploitation in the next 30 days. There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The…
CVE-2021-3517, published 2021-05-19. High severity, CVSS 8.6. EPSS: 17% chance of exploitation in the next 30 days. There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the…
CVE-2021-3537, published 2021-05-14. Medium severity, CVSS 5.9. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed…
CVE-2020-24977, published 2020-09-04. Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days. GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
CVE-2021-26708, published 2021-02-05. High severity, CVSS 7.0. EPSS: 1.6% chance of exploitation in the next 30 days. A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The…
CVE-2021-26932, published 2021-02-17. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall,…