Netapp Management Services For Netapp Hci vulnerabilities

17 CVEs affecting Netapp Management Services For Netapp Hci, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-37920, published 2023-07-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-24329, published 2023-02-17. High severity, CVSS 7.5. EPSS: 20.5% chance of exploitation in the next 30 days. An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
CVE-2021-32626, published 2021-10-04. High severity, CVSS 8.8. EPSS: 16.2% chance of exploitation in the next 30 days. Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to…
CVE-2021-32675, published 2021-10-04. High severity, CVSS 7.5. EPSS: 16.1% chance of exploitation in the next 30 days. Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specified values which…
CVE-2021-32628, published 2021-10-04. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and…
CVE-2022-37967, published 2022-11-09. High severity, CVSS 7.2. EPSS: 4.2% chance of exploitation in the next 30 days. Windows Kerberos Elevation of Privilege Vulnerability
CVE-2021-32687, published 2021-10-04. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak…
CVE-2021-32627, published 2021-10-04. High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days. Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code…
CVE-2021-32762, published 2021-10-04. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted…
CVE-2022-37966, published 2022-11-09. High severity, CVSS 8.1. EPSS: 2.5% chance of exploitation in the next 30 days. Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
CVE-2022-38023, published 2022-11-09. High severity, CVSS 8.1. EPSS: 2.4% chance of exploitation in the next 30 days. Netlogon RPC Elevation of Privilege Vulnerability

Latest

CVE-2023-37920, published 2023-07-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes…
CVE-2022-23491, published 2022-12-07. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates…
CVE-2022-36033, published 2022-08-29. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which…
CVE-2022-24736, published 2022-04-27. Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days. Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will…
CVE-2022-24735, published 2022-04-27. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua…
CVE-2021-3671, published 2021-10-12. Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days. A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the…