[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5EjVy9ZKe4XCstgDiugmHLQrrbJOk4yvhuSYBzJrj7g":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":1423,"kevVulnerabilities":1484,"topProductsByCves":1757,"seoMetadata":1768,"meta":1777},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":1422},21304,"netapp",395,2458,37,584,"2025-09-19","n",[16,23,29,36,43,50,55,58,62,66,70,74,77,80,87,92,96,102,107,112,116,122,127,133,138,142,145,149,153,156,161,166,171,176,181,186,191,196,201,205,210,215,219,224,229,232,236,239,244,248,252,257,261,266,271,276,280,285,289,294,298,302,306,309,312,316,319,323,327,330,334,339,344,348,352,355,359,362,366,370,374,377,381,385,388,392,395,399,402,406,411,414,418,423,429,432,437,440,444,448,453,457,461,464,467,470,473,476,479,482,485,489,493,496,500,503,506,510,513,517,520,523,526,529,532,535,538,541,544,547,551,555,558,561,565,569,572,575,578,582,585,589,592,596,599,602,606,609,612,615,618,621,624,628,632,635,638,641,645,648,652,655,659,663,666,670,674,678,682,685,688,691,694,698,702,705,709,712,715,718,722,726,730,734,738,742,745,749,752,755,758,761,765,768,772,776,779,782,786,790,794,797,800,803,806,810,813,816,819,823,826,830,833,836,839,842,845,849,853,856,859,862,866,869,873,877,880,883,886,889,892,895,898,901,905,908,911,914,917,920,923,926,929,932,935,939,942,945,948,952,956,960,963,966,970,973,977,981,985,988,991,994,997,1000,1003,1006,1009,1012,1016,1019,1023,1027,1030,1033,1037,1040,1044,1047,1050,1054,1057,1060,1063,1066,1069,1072,1075,1078,1081,1085,1089,1092,1095,1099,1102,1106,1109,1113,1116,1119,1122,1125,1128,1131,1134,1138,1141,1144,1147,1150,1153,1157,1160,1163,1166,1170,1174,1177,1180,1184,1187,1190,1193,1197,1200,1203,1207,1210,1213,1216,1219,1223,1227,1230,1234,1237,1240,1243,1246,1250,1253,1256,1259,1262,1265,1268,1271,1274,1277,1281,1284,1287,1290,1294,1298,1301,1304,1307,1310,1313,1316,1319,1323,1326,1329,1332,1335,1338,1341,1344,1347,1350,1353,1356,1359,1362,1365,1368,1371,1374,1377,1380,1383,1386,1389,1392,1395,1398,1401,1404,1407,1410,1413,1416,1419],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},117082,"oncommand_insight",30,959,9,"2025-02-10",{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":21,"last_cve_update":28},116817,"active_iq_unified_manager",5,827,"2025-02-18",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},117092,"oncommand_workflow_automation",10,734,4,"2025-02-04",{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":41,"last_cve_update":42},117122,"snapcenter",24,566,3,"2024-07-09",{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":48,"last_cve_update":49},116918,"cloud_backup",0,345,7,"2023-06-26",{"id":51,"product_name":52,"version_count":46,"cve_count":53,"kev_count":48,"last_cve_update":54},117028,"h500s",299,"2025-03-11",{"id":56,"product_name":57,"version_count":46,"cve_count":53,"kev_count":48,"last_cve_update":54},117038,"h700s",{"id":59,"product_name":60,"version_count":46,"cve_count":61,"kev_count":48,"last_cve_update":54},117024,"h410s",298,{"id":63,"product_name":64,"version_count":46,"cve_count":65,"kev_count":48,"last_cve_update":54},117020,"h300s",297,{"id":67,"product_name":68,"version_count":46,"cve_count":69,"kev_count":48,"last_cve_update":54},117039,"h700s_firmware",274,{"id":71,"product_name":72,"version_count":46,"cve_count":73,"kev_count":48,"last_cve_update":54},117029,"h500s_firmware",273,{"id":75,"product_name":76,"version_count":46,"cve_count":73,"kev_count":48,"last_cve_update":54},117025,"h410s_firmware",{"id":78,"product_name":79,"version_count":46,"cve_count":73,"kev_count":48,"last_cve_update":54},117021,"h300s_firmware",{"id":81,"product_name":82,"version_count":83,"cve_count":84,"kev_count":85,"last_cve_update":86},116954,"e-series_santricity_os_controller",20,242,1,"2024-07-01",{"id":88,"product_name":89,"version_count":46,"cve_count":90,"kev_count":91,"last_cve_update":54},117022,"h410c",239,8,{"id":93,"product_name":94,"version_count":46,"cve_count":95,"kev_count":91,"last_cve_update":54},117023,"h410c_firmware",227,{"id":97,"product_name":98,"version_count":46,"cve_count":99,"kev_count":100,"last_cve_update":101},117146,"steelstore_cloud_integrated_storage",211,2,"2020-10-21",{"id":103,"product_name":104,"version_count":46,"cve_count":105,"kev_count":26,"last_cve_update":106},117131,"solidfire",193,"2023-07-18",{"id":108,"product_name":109,"version_count":110,"cve_count":111,"kev_count":85,"last_cve_update":86},116928,"clustered_data_ontap",41,190,{"id":113,"product_name":114,"version_count":46,"cve_count":115,"kev_count":34,"last_cve_update":106},117054,"hci_management_node",182,{"id":117,"product_name":118,"version_count":119,"cve_count":120,"kev_count":85,"last_cve_update":121},117129,"snapmanager",11,180,"2022-11-23",{"id":123,"product_name":124,"version_count":119,"cve_count":125,"kev_count":34,"last_cve_update":126},117098,"ontap_select_deploy_administration_utility",172,"2025-02-11",{"id":128,"product_name":129,"version_count":130,"cve_count":131,"kev_count":41,"last_cve_update":132},117087,"oncommand_unified_manager",14,169,"2021-01-28",{"id":134,"product_name":135,"version_count":46,"cve_count":136,"kev_count":41,"last_cve_update":137},117036,"h700e",151,"2022-05-26",{"id":139,"product_name":140,"version_count":46,"cve_count":141,"kev_count":41,"last_cve_update":137},117018,"h300e",150,{"id":143,"product_name":144,"version_count":46,"cve_count":141,"kev_count":41,"last_cve_update":137},117026,"h500e",{"id":146,"product_name":147,"version_count":46,"cve_count":148,"kev_count":41,"last_cve_update":137},117037,"h700e_firmware",149,{"id":150,"product_name":151,"version_count":46,"cve_count":152,"kev_count":41,"last_cve_update":137},117027,"h500e_firmware",148,{"id":154,"product_name":155,"version_count":46,"cve_count":152,"kev_count":41,"last_cve_update":137},117019,"h300e_firmware",{"id":157,"product_name":158,"version_count":46,"cve_count":159,"kev_count":85,"last_cve_update":160},116956,"e-series_santricity_storage_manager",140,"2022-10-18",{"id":162,"product_name":163,"version_count":46,"cve_count":164,"kev_count":100,"last_cve_update":165},117043,"hci_compute_node",134,"2025-03-13",{"id":167,"product_name":168,"version_count":46,"cve_count":169,"kev_count":46,"last_cve_update":170},117147,"storage_automation_store",113,"2019-04-18",{"id":172,"product_name":173,"version_count":46,"cve_count":174,"kev_count":85,"last_cve_update":175},116958,"e-series_santricity_web_services",99,"2023-04-18",{"id":177,"product_name":178,"version_count":46,"cve_count":179,"kev_count":46,"last_cve_update":180},116947,"element_software",98,"2022-11-09",{"id":182,"product_name":183,"version_count":85,"cve_count":184,"kev_count":46,"last_cve_update":185},117140,"solidfire_\\&_hci_management_node",96,"2025-02-05",{"id":187,"product_name":188,"version_count":46,"cve_count":189,"kev_count":85,"last_cve_update":190},117132,"solidfire_baseboard_management_controller",86,"2021-10-11",{"id":192,"product_name":193,"version_count":85,"cve_count":194,"kev_count":48,"last_cve_update":195},117080,"oncommand_balance",83,"2019-01-16",{"id":197,"product_name":198,"version_count":46,"cve_count":199,"kev_count":46,"last_cve_update":200},117109,"santricity_unified_manager",77,"2022-04-19",{"id":202,"product_name":203,"version_count":130,"cve_count":204,"kev_count":100,"last_cve_update":106},116776,"7-mode_transition_tool",75,{"id":206,"product_name":207,"version_count":46,"cve_count":208,"kev_count":100,"last_cve_update":209},117083,"oncommand_performance_manager",73,"2018-02-06",{"id":211,"product_name":212,"version_count":213,"cve_count":214,"kev_count":100,"last_cve_update":13},117149,"storagegrid",74,72,{"id":216,"product_name":217,"version_count":46,"cve_count":218,"kev_count":85,"last_cve_update":190},117133,"solidfire_baseboard_management_controller_firmware",70,{"id":220,"product_name":221,"version_count":222,"cve_count":218,"kev_count":85,"last_cve_update":223},117165,"virtual_storage_console",6,"2021-04-01",{"id":225,"product_name":226,"version_count":46,"cve_count":227,"kev_count":46,"last_cve_update":228},117103,"plug-in_for_symantec_netbackup",69,"2020-12-08",{"id":230,"product_name":231,"version_count":26,"cve_count":227,"kev_count":85,"last_cve_update":223},117162,"vasa_provider_for_clustered_data_ontap",{"id":233,"product_name":234,"version_count":85,"cve_count":235,"kev_count":34,"last_cve_update":209},117085,"oncommand_shift",63,{"id":237,"product_name":238,"version_count":41,"cve_count":235,"kev_count":46,"last_cve_update":223},117154,"storage_replication_adapter_for_clustered_data_ontap",{"id":240,"product_name":241,"version_count":46,"cve_count":242,"kev_count":85,"last_cve_update":243},116951,"e-series_performance_analyzer",61,"2022-12-07",{"id":245,"product_name":246,"version_count":46,"cve_count":242,"kev_count":100,"last_cve_update":247},116933,"data_availability_services","2020-02-25",{"id":249,"product_name":250,"version_count":46,"cve_count":251,"kev_count":85,"last_cve_update":160},116925,"cloud_secure_agent",57,{"id":253,"product_name":254,"version_count":46,"cve_count":255,"kev_count":41,"last_cve_update":256},117032,"h610s",56,"2024-09-03",{"id":258,"product_name":259,"version_count":46,"cve_count":260,"kev_count":41,"last_cve_update":256},117033,"h610s_firmware",55,{"id":262,"product_name":263,"version_count":46,"cve_count":264,"kev_count":85,"last_cve_update":265},116920,"cloud_insights_acquisition_unit",53,"2024-01-16",{"id":267,"product_name":268,"version_count":46,"cve_count":269,"kev_count":46,"last_cve_update":270},117138,"solidfire\\,_enterprise_sds_\\&_hci_storage_node",43,"2022-06-02",{"id":272,"product_name":273,"version_count":39,"cve_count":274,"kev_count":46,"last_cve_update":275},116936,"data_ontap",42,"2021-03-04",{"id":277,"product_name":278,"version_count":91,"cve_count":274,"kev_count":100,"last_cve_update":279},117125,"snap_creator_framework","2022-04-14",{"id":281,"product_name":282,"version_count":46,"cve_count":283,"kev_count":46,"last_cve_update":284},117055,"hci_storage_node",39,"2021-12-13",{"id":286,"product_name":287,"version_count":46,"cve_count":288,"kev_count":85,"last_cve_update":165},116904,"bootstrap_os",36,{"id":290,"product_name":291,"version_count":46,"cve_count":292,"kev_count":85,"last_cve_update":293},116959,"e-series_santricity_web_services_proxy",34,"2023-10-27",{"id":295,"product_name":296,"version_count":46,"cve_count":292,"kev_count":46,"last_cve_update":297},117045,"hci_compute_node_firmware","2025-01-20",{"id":299,"product_name":300,"version_count":119,"cve_count":301,"kev_count":85,"last_cve_update":185},117041,"hci_baseboard_management_controller",33,{"id":303,"product_name":304,"version_count":46,"cve_count":305,"kev_count":85,"last_cve_update":256},117030,"h610c",32,{"id":307,"product_name":308,"version_count":46,"cve_count":305,"kev_count":46,"last_cve_update":86},116804,"a700s",{"id":310,"product_name":311,"version_count":46,"cve_count":305,"kev_count":46,"last_cve_update":86},116805,"a700s_firmware",{"id":313,"product_name":314,"version_count":46,"cve_count":315,"kev_count":85,"last_cve_update":256},117031,"h610c_firmware",31,{"id":317,"product_name":318,"version_count":46,"cve_count":19,"kev_count":85,"last_cve_update":256},117034,"h615c",{"id":320,"product_name":321,"version_count":46,"cve_count":322,"kev_count":85,"last_cve_update":256},117035,"h615c_firmware",29,{"id":324,"product_name":325,"version_count":34,"cve_count":322,"kev_count":46,"last_cve_update":326},117111,"service_level_manager","2021-12-16",{"id":328,"product_name":329,"version_count":46,"cve_count":322,"kev_count":85,"last_cve_update":293},116957,"e-series_santricity_unified_manager",{"id":331,"product_name":332,"version_count":46,"cve_count":333,"kev_count":85,"last_cve_update":101},116953,"e-series_santricity_management_plug-ins",28,{"id":335,"product_name":336,"version_count":46,"cve_count":337,"kev_count":46,"last_cve_update":338},117104,"santricity_cloud_connector",27,"2021-06-22",{"id":340,"product_name":341,"version_count":342,"cve_count":337,"kev_count":100,"last_cve_update":343},117086,"oncommand_system_manager",15,"2021-02-08",{"id":345,"product_name":346,"version_count":46,"cve_count":337,"kev_count":46,"last_cve_update":347},117067,"management_services_for_element_software","2023-08-07",{"id":349,"product_name":350,"version_count":21,"cve_count":351,"kev_count":85,"last_cve_update":101},117124,"snapcenter_server",23,{"id":353,"product_name":354,"version_count":46,"cve_count":351,"kev_count":46,"last_cve_update":195},116938,"data_ontap_edge",{"id":356,"product_name":357,"version_count":46,"cve_count":351,"kev_count":100,"last_cve_update":358},116921,"cloud_insights_storage_workload_security_agent","2024-07-16",{"id":360,"product_name":361,"version_count":46,"cve_count":351,"kev_count":46,"last_cve_update":121},116929,"clustered_data_ontap_antivirus_connector",{"id":363,"product_name":364,"version_count":46,"cve_count":365,"kev_count":85,"last_cve_update":256},116793,"a250",22,{"id":367,"product_name":368,"version_count":46,"cve_count":365,"kev_count":46,"last_cve_update":369},117004,"fas\\\u002Faff_bios","2022-05-12",{"id":371,"product_name":372,"version_count":46,"cve_count":365,"kev_count":46,"last_cve_update":373},116931,"cn1610_firmware","2019-06-14",{"id":375,"product_name":376,"version_count":46,"cve_count":365,"kev_count":85,"last_cve_update":293},117108,"santricity_storage_plugin",{"id":378,"product_name":379,"version_count":46,"cve_count":365,"kev_count":46,"last_cve_update":380},117042,"hci_bootstrap_os","2023-03-17",{"id":382,"product_name":383,"version_count":100,"cve_count":365,"kev_count":100,"last_cve_update":384},117101,"ontap_tools","2024-11-11",{"id":386,"product_name":387,"version_count":46,"cve_count":365,"kev_count":46,"last_cve_update":373},116930,"cn1610",{"id":389,"product_name":390,"version_count":46,"cve_count":391,"kev_count":85,"last_cve_update":256},116794,"a250_firmware",21,{"id":393,"product_name":394,"version_count":46,"cve_count":391,"kev_count":85,"last_cve_update":185},117142,"solidfire_\\&_hci_storage_node",{"id":396,"product_name":397,"version_count":46,"cve_count":391,"kev_count":85,"last_cve_update":398},116835,"aff_a400","2022-08-18",{"id":400,"product_name":401,"version_count":46,"cve_count":391,"kev_count":85,"last_cve_update":398},116836,"aff_a400_firmware",{"id":403,"product_name":404,"version_count":46,"cve_count":83,"kev_count":46,"last_cve_update":405},117044,"hci_compute_node_bios","2024-05-16",{"id":407,"product_name":408,"version_count":222,"cve_count":409,"kev_count":46,"last_cve_update":410},117079,"oncommand_api_services",19,"2021-03-30",{"id":412,"product_name":413,"version_count":46,"cve_count":409,"kev_count":85,"last_cve_update":398},116839,"aff_a700s",{"id":415,"product_name":416,"version_count":46,"cve_count":409,"kev_count":85,"last_cve_update":417},117121,"smi-s_provider","2023-04-25",{"id":419,"product_name":420,"version_count":421,"cve_count":409,"kev_count":85,"last_cve_update":422},116924,"cloud_manager",44,"2021-12-18",{"id":424,"product_name":425,"version_count":426,"cve_count":427,"kev_count":46,"last_cve_update":428},117126,"snapdrive",13,18,"2022-05-03",{"id":430,"product_name":431,"version_count":85,"cve_count":427,"kev_count":85,"last_cve_update":398},116840,"aff_a700s_firmware",{"id":433,"product_name":434,"version_count":41,"cve_count":435,"kev_count":85,"last_cve_update":436},116847,"aff_baseboard_management_controller",17,"2022-02-18",{"id":438,"product_name":439,"version_count":85,"cve_count":435,"kev_count":46,"last_cve_update":256},117068,"management_services_for_element_software_and_netapp_hci",{"id":441,"product_name":442,"version_count":46,"cve_count":435,"kev_count":46,"last_cve_update":443},117069,"management_services_for_netapp_hci","2023-07-25",{"id":445,"product_name":446,"version_count":46,"cve_count":435,"kev_count":85,"last_cve_update":447},117130,"snapprotect","2019-05-17",{"id":449,"product_name":450,"version_count":46,"cve_count":451,"kev_count":85,"last_cve_update":452},116816,"active_iq_performance_analytics_services",16,"2019-09-04",{"id":454,"product_name":455,"version_count":26,"cve_count":451,"kev_count":46,"last_cve_update":456},117093,"ontap","2025-03-30",{"id":458,"product_name":459,"version_count":46,"cve_count":451,"kev_count":46,"last_cve_update":460},117134,"solidfire_bios","2022-02-09",{"id":462,"product_name":463,"version_count":46,"cve_count":451,"kev_count":46,"last_cve_update":86},116800,"a400_firmware",{"id":465,"product_name":466,"version_count":46,"cve_count":451,"kev_count":46,"last_cve_update":86},116799,"a400",{"id":468,"product_name":469,"version_count":34,"cve_count":451,"kev_count":46,"last_cve_update":347},117040,"hci",{"id":471,"product_name":472,"version_count":46,"cve_count":342,"kev_count":46,"last_cve_update":86},116781,"8700",{"id":474,"product_name":475,"version_count":46,"cve_count":342,"kev_count":46,"last_cve_update":86},116779,"8300",{"id":477,"product_name":478,"version_count":46,"cve_count":342,"kev_count":46,"last_cve_update":86},116780,"8300_firmware",{"id":480,"product_name":481,"version_count":46,"cve_count":342,"kev_count":46,"last_cve_update":28},117066,"manageability_software_development_kit",{"id":483,"product_name":484,"version_count":46,"cve_count":342,"kev_count":46,"last_cve_update":86},116782,"8700_firmware",{"id":486,"product_name":487,"version_count":46,"cve_count":130,"kev_count":46,"last_cve_update":488},117003,"fas\\\u002Faff_baseboard_management_controller","2021-03-22",{"id":490,"product_name":491,"version_count":46,"cve_count":130,"kev_count":46,"last_cve_update":492},117105,"santricity_smi-s_provider","2022-06-21",{"id":494,"product_name":495,"version_count":46,"cve_count":130,"kev_count":85,"last_cve_update":256},116774,"500f",{"id":497,"product_name":498,"version_count":46,"cve_count":130,"kev_count":85,"last_cve_update":499},116820,"aff_500f_firmware","2022-07-27",{"id":501,"product_name":502,"version_count":46,"cve_count":130,"kev_count":85,"last_cve_update":499},116819,"aff_500f",{"id":504,"product_name":505,"version_count":46,"cve_count":130,"kev_count":46,"last_cve_update":460},117056,"hci_storage_node_bios",{"id":507,"product_name":508,"version_count":427,"cve_count":426,"kev_count":100,"last_cve_update":509},117112,"service_processor","2021-01-04",{"id":511,"product_name":512,"version_count":46,"cve_count":426,"kev_count":85,"last_cve_update":256},116775,"500f_firmware",{"id":514,"product_name":515,"version_count":46,"cve_count":516,"kev_count":46,"last_cve_update":499},116823,"aff_8700",12,{"id":518,"product_name":519,"version_count":46,"cve_count":516,"kev_count":46,"last_cve_update":499},116821,"aff_8300",{"id":521,"product_name":522,"version_count":46,"cve_count":516,"kev_count":46,"last_cve_update":499},116822,"aff_8300_firmware",{"id":524,"product_name":525,"version_count":46,"cve_count":516,"kev_count":46,"last_cve_update":499},116824,"aff_8700_firmware",{"id":527,"product_name":528,"version_count":46,"cve_count":516,"kev_count":85,"last_cve_update":499},116990,"fas_8700",{"id":530,"product_name":531,"version_count":46,"cve_count":516,"kev_count":85,"last_cve_update":499},116986,"fas_8300",{"id":533,"product_name":534,"version_count":46,"cve_count":119,"kev_count":46,"last_cve_update":499},116980,"fas_500f",{"id":536,"product_name":537,"version_count":46,"cve_count":119,"kev_count":85,"last_cve_update":499},116992,"fas_8700_firmware",{"id":539,"product_name":540,"version_count":46,"cve_count":119,"kev_count":85,"last_cve_update":398},116829,"aff_a250",{"id":542,"product_name":543,"version_count":46,"cve_count":119,"kev_count":46,"last_cve_update":499},116982,"fas_500f_firmware",{"id":545,"product_name":546,"version_count":46,"cve_count":119,"kev_count":85,"last_cve_update":398},116830,"aff_a250_firmware",{"id":548,"product_name":549,"version_count":41,"cve_count":119,"kev_count":46,"last_cve_update":550},117161,"vasa_provider","2020-10-23",{"id":552,"product_name":553,"version_count":21,"cve_count":119,"kev_count":85,"last_cve_update":554},117088,"oncommand_unified_manager_core_package","2021-01-26",{"id":556,"product_name":557,"version_count":46,"cve_count":119,"kev_count":46,"last_cve_update":369},117017,"fas_bios",{"id":559,"product_name":560,"version_count":46,"cve_count":119,"kev_count":85,"last_cve_update":499},116988,"fas_8300_firmware",{"id":562,"product_name":563,"version_count":46,"cve_count":119,"kev_count":46,"last_cve_update":564},117160,"trident","2021-10-29",{"id":566,"product_name":567,"version_count":46,"cve_count":119,"kev_count":46,"last_cve_update":568},116952,"e-series_santricity_management","2020-01-15",{"id":570,"product_name":571,"version_count":46,"cve_count":119,"kev_count":46,"last_cve_update":358},116935,"data_infrastructure_insights_storage_workload_security_agent",{"id":573,"product_name":574,"version_count":46,"cve_count":32,"kev_count":85,"last_cve_update":86},116974,"fas2750",{"id":576,"product_name":577,"version_count":46,"cve_count":32,"kev_count":85,"last_cve_update":86},116972,"fas2720",{"id":579,"product_name":580,"version_count":46,"cve_count":32,"kev_count":46,"last_cve_update":581},116926,"cloud_volumes_ontap_mediator","2024-02-29",{"id":583,"product_name":584,"version_count":46,"cve_count":32,"kev_count":85,"last_cve_update":49},116909,"brocade_san_navigator",{"id":586,"product_name":587,"version_count":46,"cve_count":32,"kev_count":46,"last_cve_update":588},116849,"aff_bios","2021-06-09",{"id":590,"product_name":591,"version_count":46,"cve_count":32,"kev_count":85,"last_cve_update":86},116975,"fas2750_firmware",{"id":593,"product_name":594,"version_count":46,"cve_count":32,"kev_count":46,"last_cve_update":595},116923,"cloud_insights_telegraf_agent","2022-07-15",{"id":597,"product_name":598,"version_count":46,"cve_count":32,"kev_count":85,"last_cve_update":86},116973,"fas2720_firmware",{"id":600,"product_name":601,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":398},116989,"fas8300_firmware",{"id":603,"product_name":604,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":605},116949,"element_software_management_node","2019-10-17",{"id":607,"product_name":608,"version_count":46,"cve_count":21,"kev_count":85,"last_cve_update":86},116791,"a220",{"id":610,"product_name":611,"version_count":46,"cve_count":21,"kev_count":85,"last_cve_update":86},116792,"a220_firmware",{"id":613,"product_name":614,"version_count":46,"cve_count":21,"kev_count":85,"last_cve_update":86},116807,"a800",{"id":616,"product_name":617,"version_count":46,"cve_count":21,"kev_count":85,"last_cve_update":86},116808,"a800_firmware",{"id":619,"product_name":620,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":398},116993,"fas8700_firmware",{"id":622,"product_name":623,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":398},116991,"fas8700",{"id":625,"product_name":626,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":627},116902,"bluexp","2024-09-19",{"id":629,"product_name":630,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":631},116946,"element_plug-in_for_vcenter_server","2022-07-07",{"id":633,"product_name":634,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":398},116987,"fas8300",{"id":636,"product_name":637,"version_count":46,"cve_count":21,"kev_count":85,"last_cve_update":86},116910,"c190",{"id":639,"product_name":640,"version_count":46,"cve_count":21,"kev_count":85,"last_cve_update":86},116911,"c190_firmware",{"id":642,"product_name":643,"version_count":46,"cve_count":21,"kev_count":46,"last_cve_update":644},116934,"data_infrastructure_insights_acquisition_unit","2024-04-16",{"id":646,"product_name":647,"version_count":46,"cve_count":91,"kev_count":46,"last_cve_update":428},116965,"fabric-attached_storage_a400_firmware",{"id":649,"product_name":650,"version_count":46,"cve_count":91,"kev_count":46,"last_cve_update":651},117097,"ontap_select_deploy","2023-05-03",{"id":653,"product_name":654,"version_count":46,"cve_count":91,"kev_count":46,"last_cve_update":428},116964,"fabric-attached_storage_a400",{"id":656,"product_name":657,"version_count":46,"cve_count":48,"kev_count":85,"last_cve_update":658},117094,"ontap_9","2024-12-18",{"id":660,"product_name":661,"version_count":46,"cve_count":48,"kev_count":85,"last_cve_update":662},117070,"max_data","2020-07-30",{"id":664,"product_name":665,"version_count":100,"cve_count":48,"kev_count":46,"last_cve_update":160},117110,"santricity_web_services_proxy",{"id":667,"product_name":668,"version_count":46,"cve_count":222,"kev_count":85,"last_cve_update":669},116797,"a320","2024-04-03",{"id":671,"product_name":672,"version_count":26,"cve_count":222,"kev_count":46,"last_cve_update":673},117145,"steelstore","2019-11-25",{"id":675,"product_name":676,"version_count":91,"cve_count":222,"kev_count":46,"last_cve_update":677},117151,"storagegrid_webscale","2018-11-14",{"id":679,"product_name":680,"version_count":46,"cve_count":222,"kev_count":46,"last_cve_update":681},117046,"hci_h410c","2021-05-19",{"id":683,"product_name":684,"version_count":46,"cve_count":222,"kev_count":46,"last_cve_update":681},117047,"hci_h410c_firmware",{"id":686,"product_name":687,"version_count":46,"cve_count":222,"kev_count":46,"last_cve_update":588},116950,"e-series_bios",{"id":689,"product_name":690,"version_count":41,"cve_count":222,"kev_count":46,"last_cve_update":550},117153,"storage_replication_adapter",{"id":692,"product_name":693,"version_count":46,"cve_count":222,"kev_count":85,"last_cve_update":669},116798,"a320_firmware",{"id":695,"product_name":696,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":697},116922,"cloud_insights_telegraf","2022-08-10",{"id":699,"product_name":700,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":701},116818,"active_iq_unified_manager_for_vmware_vsphere","2019-06-03",{"id":703,"product_name":704,"version_count":46,"cve_count":26,"kev_count":85,"last_cve_update":200},116919,"cloud_insights",{"id":706,"product_name":707,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":708},116948,"element_software_management","2019-02-24",{"id":710,"product_name":711,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":86},116978,"fas2820",{"id":713,"product_name":714,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":86},116979,"fas2820_firmware",{"id":716,"product_name":717,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":284},117057,"hci_storage_node_firmware",{"id":719,"product_name":720,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":721},117062,"hyper_converged_infrastructure","2019-02-27",{"id":723,"product_name":724,"version_count":46,"cve_count":26,"kev_count":46,"last_cve_update":725},117095,"ontap_antivirus_connector","2023-05-26",{"id":727,"product_name":728,"version_count":100,"cve_count":26,"kev_count":46,"last_cve_update":729},117123,"snapcenter_plug-in","2023-10-12",{"id":731,"product_name":732,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":733},117076,"nextgen_api","2021-10-07",{"id":735,"product_name":736,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":737},117065,"kubernetes_monitoring_operator","2022-04-20",{"id":739,"product_name":740,"version_count":100,"cve_count":34,"kev_count":46,"last_cve_update":741},117166,"virtual_storage_console_for_vmware_vsphere","2019-04-25",{"id":743,"product_name":744,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":86},116917,"c800_firmware",{"id":746,"product_name":747,"version_count":46,"cve_count":34,"kev_count":85,"last_cve_update":748},117058,"hci_storage_nodes","2023-07-10",{"id":750,"product_name":751,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":86},116788,"a150_firmware",{"id":753,"product_name":754,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":86},116915,"c400_firmware",{"id":756,"product_name":757,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":86},116914,"c400",{"id":759,"product_name":760,"version_count":46,"cve_count":34,"kev_count":85,"last_cve_update":256},116913,"c250_firmware",{"id":762,"product_name":763,"version_count":46,"cve_count":34,"kev_count":85,"last_cve_update":764},116942,"element","2019-11-08",{"id":766,"product_name":767,"version_count":46,"cve_count":34,"kev_count":85,"last_cve_update":256},116912,"c250",{"id":769,"product_name":770,"version_count":301,"cve_count":34,"kev_count":46,"last_cve_update":771},116944,"element_os","2021-01-08",{"id":773,"product_name":774,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":775},116932,"converged_systems_advisor_agent","2024-05-30",{"id":777,"product_name":778,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":86},116810,"a900",{"id":780,"product_name":781,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":86},116811,"a900_firmware",{"id":783,"product_name":784,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":785},116900,"beegfs_csi_driver","2022-06-23",{"id":787,"product_name":788,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":789},116815,"active_iq","2022-04-04",{"id":791,"product_name":792,"version_count":41,"cve_count":34,"kev_count":85,"last_cve_update":793},117090,"oncommand_unified_manager_for_clustered_data_ontap","2017-09-01",{"id":795,"product_name":796,"version_count":46,"cve_count":34,"kev_count":46,"last_cve_update":499},117001,"fas_a400",{"id":798,"product_name":799,"version_count":100,"cve_count":41,"kev_count":46,"last_cve_update":436},117005,"fas_baseboard_management_controller",{"id":801,"product_name":802,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":195},117136,"solidfire_element_os_management_node",{"id":804,"product_name":805,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":380},117135,"solidfire_element_os",{"id":807,"product_name":808,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":809},116997,"fas9500","2024-03-18",{"id":811,"product_name":812,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":86},116806,"a70_firmware",{"id":814,"product_name":815,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":809},116998,"fas9500_firmware",{"id":817,"product_name":818,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":398},116850,"aff_c190",{"id":820,"product_name":821,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":822},116908,"brocade_network_advisor","2019-01-22",{"id":824,"product_name":825,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":398},116851,"aff_c190_firmware",{"id":827,"product_name":828,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":829},116960,"fabric-attached_storage_8300","2021-12-25",{"id":831,"product_name":832,"version_count":85,"cve_count":41,"kev_count":46,"last_cve_update":829},116961,"fabric-attached_storage_8300_firmware",{"id":834,"product_name":835,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":86},116809,"a90",{"id":837,"product_name":838,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":829},116962,"fabric-attached_storage_8700",{"id":840,"product_name":841,"version_count":85,"cve_count":41,"kev_count":46,"last_cve_update":829},116963,"fabric-attached_storage_8700_firmware",{"id":843,"product_name":844,"version_count":85,"cve_count":41,"kev_count":46,"last_cve_update":279},117071,"metrocluster_tiebreaker",{"id":846,"product_name":847,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":848},116860,"all_flash_fabric-attached_storage_a400","2023-08-11",{"id":850,"product_name":851,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":852},116927,"cluster_data_ontap","2021-03-03",{"id":854,"product_name":855,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":499},117002,"fas_a400_firmware",{"id":857,"product_name":858,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":848},116854,"all_flash_fabric-attached_storage_8300",{"id":860,"product_name":861,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":86},116812,"a90_firmware",{"id":863,"product_name":864,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":865},117156,"storage_services_connector","2019-04-22",{"id":867,"product_name":868,"version_count":130,"cve_count":41,"kev_count":46,"last_cve_update":673},116867,"altavault",{"id":870,"product_name":871,"version_count":46,"cve_count":41,"kev_count":85,"last_cve_update":872},116869,"astra_control_center","2024-03-07",{"id":874,"product_name":875,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":876},116870,"astra_trident","2023-10-11",{"id":878,"product_name":879,"version_count":85,"cve_count":41,"kev_count":46,"last_cve_update":741},117155,"storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere",{"id":881,"product_name":882,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":669},116787,"a150",{"id":884,"product_name":885,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":848},116856,"all_flash_fabric-attached_storage_8700",{"id":887,"product_name":888,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":86},116790,"a1k_firmware",{"id":890,"product_name":891,"version_count":46,"cve_count":41,"kev_count":85,"last_cve_update":499},117137,"solidfire_enterprise_sds",{"id":893,"product_name":894,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":669},116916,"c800",{"id":896,"product_name":897,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":398},116827,"aff_a220",{"id":899,"product_name":900,"version_count":46,"cve_count":41,"kev_count":46,"last_cve_update":398},116828,"aff_a220_firmware",{"id":902,"product_name":903,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":904},117008,"fas_baseboard_management_controller_a320","2020-04-10",{"id":906,"product_name":907,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":49},117163,"virtual_desktop_service",{"id":909,"product_name":910,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116981,"fas500f",{"id":912,"product_name":913,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116983,"fas500f_firmware",{"id":915,"product_name":916,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116984,"fas8200",{"id":918,"product_name":919,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116985,"fas8200_firmware",{"id":921,"product_name":922,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":829},116906,"brocade_fabric_operating_system_firmware",{"id":924,"product_name":925,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":256},116905,"brocade_fabric_operating_system",{"id":927,"product_name":928,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":904},117006,"fas_baseboard_management_controller_a220",{"id":930,"product_name":931,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":904},117012,"fas_baseboard_management_controller_a800",{"id":933,"product_name":934,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":904},117014,"fas_baseboard_management_controller_c190",{"id":936,"product_name":937,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":938},116877,"baseboard_management_controller_firmware","2022-02-16",{"id":940,"product_name":941,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":673},116872,"baseboard_management_controller",{"id":943,"product_name":944,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":185},117050,"hci_h610s",{"id":946,"product_name":947,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":185},117051,"hci_h610s_firmware",{"id":949,"product_name":950,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":951},117061,"host_agent","2017-11-13",{"id":953,"product_name":954,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":955},117064,"inventory_collect_tool","2021-02-15",{"id":957,"product_name":958,"version_count":85,"cve_count":100,"kev_count":46,"last_cve_update":959},116861,"all_flash_fabric-attached_storage_a400_firmware","2020-04-17",{"id":961,"product_name":962,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":829},116857,"all_flash_fabric-attached_storage_8700_firmware",{"id":964,"product_name":965,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":829},116855,"all_flash_fabric-attached_storage_8300_firmware",{"id":967,"product_name":968,"version_count":83,"cve_count":100,"kev_count":85,"last_cve_update":969},117081,"oncommand_cloud_manager","2020-02-26",{"id":971,"product_name":972,"version_count":46,"cve_count":100,"kev_count":85,"last_cve_update":436},116848,"aff_baseboard_management_controller_firmware",{"id":974,"product_name":975,"version_count":91,"cve_count":100,"kev_count":46,"last_cve_update":976},117167,"windows_host_utilities","2024-10-27",{"id":978,"product_name":979,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":980},117096,"ontap_mediator","2023-12-21",{"id":982,"product_name":983,"version_count":34,"cve_count":100,"kev_count":46,"last_cve_update":984},117100,"ontap_system_manager","2021-11-01",{"id":986,"product_name":987,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116838,"aff_a700_firmware",{"id":989,"product_name":990,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116837,"aff_a700",{"id":992,"product_name":993,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116834,"aff_a320_firmware",{"id":995,"product_name":996,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116833,"aff_a320",{"id":998,"product_name":999,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116832,"aff_a300_firmware",{"id":1001,"product_name":1002,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116831,"aff_a300",{"id":1004,"product_name":1005,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116826,"aff_a200_firmware",{"id":1007,"product_name":1008,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":398},116825,"aff_a200",{"id":1010,"product_name":1011,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":669},116801,"a70",{"id":1013,"product_name":1014,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":1015},117144,"sra_plugin","2020-06-03",{"id":1017,"product_name":1018,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":669},116789,"a1k",{"id":1020,"product_name":1021,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":1022},117148,"storage_encryption","2021-08-24",{"id":1024,"product_name":1025,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":1026},117152,"storagegrid_webscale_nas_bridge","2018-12-13",{"id":1028,"product_name":1029,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":669},116786,"9500_firmware",{"id":1031,"product_name":1032,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":669},116785,"9500",{"id":1034,"product_name":1035,"version_count":46,"cve_count":100,"kev_count":46,"last_cve_update":1036},117157,"symantec_netbackup","2020-01-21",{"id":1038,"product_name":1039,"version_count":41,"cve_count":100,"kev_count":46,"last_cve_update":955},117158,"system_manager",{"id":1041,"product_name":1042,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1043},116977,"fas27x0_firmware","2020-05-11",{"id":1045,"product_name":1046,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1043},116976,"fas27x0",{"id":1048,"product_name":1049,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116971,"fas2700_firmware",{"id":1051,"product_name":1052,"version_count":85,"cve_count":85,"kev_count":46,"last_cve_update":1053},117063,"hyper_converged_infrastructure_compute_node","2019-04-29",{"id":1055,"product_name":1056,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116784,"9000_firmware",{"id":1058,"product_name":1059,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":904},117010,"fas_baseboard_management_controller_a400",{"id":1061,"product_name":1062,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116783,"9000",{"id":1064,"product_name":1065,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":904},117009,"fas_baseboard_management_controller_a320_firmware",{"id":1067,"product_name":1068,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116859,"all_flash_fabric-attached_storage_a250",{"id":1070,"product_name":1071,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116858,"all_flash_fabric-attached_storage_9500",{"id":1073,"product_name":1074,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116795,"a300",{"id":1076,"product_name":1077,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":228},116940,"ef600a",{"id":1079,"product_name":1080,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":121},117072,"netapp_manageability_sdk",{"id":1082,"product_name":1083,"version_count":85,"cve_count":85,"kev_count":46,"last_cve_update":1084},117073,"netapp_plug-in","2016-12-05",{"id":1086,"product_name":1087,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1088},117074,"netapp_xcp_smb","2022-03-04",{"id":1090,"product_name":1091,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":185},117052,"hci_h615c",{"id":1093,"product_name":1094,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":904},117007,"fas_baseboard_management_controller_a220_firmware",{"id":1096,"product_name":1097,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1098},117077,"next_generation_application_programming_interface","2021-11-13",{"id":1100,"product_name":1101,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":185},117049,"hci_h610c_firmware",{"id":1103,"product_name":1104,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1105},117078,"nfs_plug-in","2022-08-24",{"id":1107,"product_name":1108,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116802,"a700",{"id":1110,"product_name":1111,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1112},116876,"baseboard_management_controller_a250_firmware","2021-02-05",{"id":1114,"product_name":1115,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":185},117053,"hci_h615c_firmware",{"id":1117,"product_name":1118,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1112},116874,"baseboard_management_controller_500f_firmware",{"id":1120,"product_name":1121,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116970,"fas2700",{"id":1123,"product_name":1124,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116778,"8200_firmware",{"id":1126,"product_name":1127,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":876},116871,"astra_trident_autosupport",{"id":1129,"product_name":1130,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116864,"all_flash_fabric-attached_storage_c250",{"id":1132,"product_name":1133,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":436},117016,"fas_baseboard_management_controller_firmware",{"id":1135,"product_name":1136,"version_count":26,"cve_count":85,"kev_count":46,"last_cve_update":1137},116868,"altavault_ost_plug-in","2017-11-17",{"id":1139,"product_name":1140,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":904},117015,"fas_baseboard_management_controller_c190_firmware",{"id":1142,"product_name":1143,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116866,"all_flash_fabric-attached_storage_c800",{"id":1145,"product_name":1146,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116865,"all_flash_fabric-attached_storage_c400",{"id":1148,"product_name":1149,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":185},117048,"hci_h610c",{"id":1151,"product_name":1152,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116853,"all_flash_fabric-attached_storage_500f",{"id":1154,"product_name":1155,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":1156},117084,"oncommand_report","2016-04-21",{"id":1158,"product_name":1159,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116852,"all_flash_fabric-attached_storage_2820",{"id":1161,"product_name":1162,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":499},117000,"fas_a250_firmware",{"id":1164,"product_name":1165,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":499},116999,"fas_a250",{"id":1167,"product_name":1168,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1169},116945,"element_plug-in","2020-12-03",{"id":1171,"product_name":1172,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1173},117089,"oncommand_unified_manager_for_7-mode","2018-06-26",{"id":1175,"product_name":1176,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116996,"fas9000_firmware",{"id":1178,"product_name":1179,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116863,"all_flash_fabric-attached_storage_a900",{"id":1181,"product_name":1182,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1183},116846,"affa900_firmware","2023-11-14",{"id":1185,"product_name":1186,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116845,"aff_a900_firmware",{"id":1188,"product_name":1189,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1183},116844,"affa900",{"id":1191,"product_name":1192,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1043},116969,"fas26x0_firmware",{"id":1194,"product_name":1195,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1196},117150,"storagegrid_firmware","2021-03-25",{"id":1198,"product_name":1199,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116843,"aff_a900",{"id":1201,"product_name":1202,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116842,"aff_a800_firmware",{"id":1204,"product_name":1205,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1206},117099,"ontap_select_deploy_utility","2018-08-20",{"id":1208,"product_name":1209,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1043},116968,"fas26x0",{"id":1211,"product_name":1212,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116841,"aff_a800",{"id":1214,"product_name":1215,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":848},116862,"all_flash_fabric-attached_storage_a800",{"id":1217,"product_name":1218,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116777,"8200",{"id":1220,"product_name":1221,"version_count":85,"cve_count":85,"kev_count":46,"last_cve_update":1222},116943,"element_healthtools","2020-05-21",{"id":1224,"product_name":1225,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1226},116939,"data_ontap_operating_in_7-mode","2017-01-06",{"id":1228,"product_name":1229,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1196},117106,"santricity_smi-s_provider_firmware",{"id":1231,"product_name":1232,"version_count":41,"cve_count":85,"kev_count":46,"last_cve_update":1233},117107,"santricity_storage_manager","2018-06-13",{"id":1235,"product_name":1236,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116967,"fas2600_firmware",{"id":1238,"product_name":1239,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116966,"fas2600",{"id":1241,"product_name":1242,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":228},116941,"ef600a_firmware",{"id":1244,"product_name":1245,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":398},116995,"fas9000",{"id":1247,"product_name":1248,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1249},116994,"fas900","2008-07-28",{"id":1251,"product_name":1252,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117113,"sg110",{"id":1254,"product_name":1255,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117114,"sg1100",{"id":1257,"product_name":1258,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117115,"sg1100_firmware",{"id":1260,"product_name":1261,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117116,"sg110_firmware",{"id":1263,"product_name":1264,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117117,"sg6160",{"id":1266,"product_name":1267,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117118,"sg6160_firmware",{"id":1269,"product_name":1270,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117119,"sgf6112",{"id":1272,"product_name":1273,"version_count":46,"cve_count":85,"kev_count":85,"last_cve_update":54},117120,"sgf6112_firmware",{"id":1275,"product_name":1276,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":223},116955,"e-series_santricity_storage",{"id":1278,"product_name":1279,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1280},117159,"system_setup","2016-09-21",{"id":1282,"product_name":1283,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1088},117168,"xcp_nfs",{"id":1285,"product_name":1286,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":904},117013,"fas_baseboard_management_controller_a800_firmware",{"id":1288,"product_name":1289,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":86},116814,"a9500_firmware",{"id":1291,"product_name":1292,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1293},117059,"hcl_compute_node","2020-11-12",{"id":1295,"product_name":1296,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1297},117127,"snapdriver","2018-12-07",{"id":1299,"product_name":1300,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":729},117128,"snapgathers",{"id":1302,"product_name":1303,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":1293},117060,"hcl_compute_node_bios",{"id":1305,"product_name":1306,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":270},116901,"bh500s_firmware",{"id":1308,"product_name":1309,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":725},116903,"blue_xp_connector",{"id":1311,"product_name":1312,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116796,"a300_firmware",{"id":1314,"product_name":1315,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":904},117011,"fas_baseboard_management_controller_a400_firmware",{"id":1317,"product_name":1318,"version_count":46,"cve_count":85,"kev_count":46,"last_cve_update":669},116803,"a700_firmware",{"id":1320,"product_name":1321,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116879,"baseboard_management_controller_h300e_firmware",null,{"id":1324,"product_name":1325,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},117141,"solidfire_\\\\&_hci_management_node",{"id":1327,"product_name":1328,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},117143,"solidfire_\\\\&_hci_storage_node",{"id":1330,"product_name":1331,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},117075,"netcache",{"id":1333,"product_name":1334,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116896,"baseboard_management_controller_h700e",{"id":1336,"product_name":1337,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116897,"baseboard_management_controller_h700e_firmware",{"id":1339,"product_name":1340,"version_count":34,"cve_count":46,"kev_count":46,"last_cve_update":1322},117091,"oncommand_unified_manger",{"id":1342,"product_name":1343,"version_count":41,"cve_count":46,"kev_count":46,"last_cve_update":1322},117102,"os_controller",{"id":1345,"product_name":1346,"version_count":85,"cve_count":46,"kev_count":46,"last_cve_update":1322},116937,"data_ontap_dsm_for_windows_mpio",{"id":1348,"product_name":1349,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116898,"baseboard_management_controller_h700s",{"id":1351,"product_name":1352,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116813,"a9500",{"id":1354,"product_name":1355,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116899,"baseboard_management_controller_h700s_firmware",{"id":1357,"product_name":1358,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116907,"brocade_fabric_os",{"id":1360,"product_name":1361,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},117164,"virtual_file_mangemer",{"id":1363,"product_name":1364,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116894,"baseboard_management_controller_h615c",{"id":1366,"product_name":1367,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116893,"baseboard_management_controller_h610s_firmware",{"id":1369,"product_name":1370,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116892,"baseboard_management_controller_h610s",{"id":1372,"product_name":1373,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116891,"baseboard_management_controller_h610c_firmware",{"id":1375,"product_name":1376,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116890,"baseboard_management_controller_h610c",{"id":1378,"product_name":1379,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116889,"baseboard_management_controller_h500s_firmware",{"id":1381,"product_name":1382,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116888,"baseboard_management_controller_h500s",{"id":1384,"product_name":1385,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116887,"baseboard_management_controller_h500e_firmware",{"id":1387,"product_name":1388,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116886,"baseboard_management_controller_h500e",{"id":1390,"product_name":1391,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116885,"baseboard_management_controller_h410s_firmware",{"id":1393,"product_name":1394,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116884,"baseboard_management_controller_h410s",{"id":1396,"product_name":1397,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116883,"baseboard_management_controller_h410c_firmware",{"id":1399,"product_name":1400,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116882,"baseboard_management_controller_h410c",{"id":1402,"product_name":1403,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116881,"baseboard_management_controller_h300s_firmware",{"id":1405,"product_name":1406,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116880,"baseboard_management_controller_h300s",{"id":1408,"product_name":1409,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116878,"baseboard_management_controller_h300e",{"id":1411,"product_name":1412,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116875,"baseboard_management_controller_a250",{"id":1414,"product_name":1415,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116873,"baseboard_management_controller_500f",{"id":1417,"product_name":1418,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},117139,"solidfire\\\\,_enterprise_sds_\\\\&_hci_storage_node",{"id":1420,"product_name":1421,"version_count":46,"cve_count":46,"kev_count":46,"last_cve_update":1322},116895,"baseboard_management_controller_h615c_firmware","Netapp is a technology vendor with 395 tracked products and 2458 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[1424,1432,1439,1444,1450,1455,1460,1465,1472,1478],{"cveId":1425,"description":1426,"publishedDate":1427,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1431},"CVE-2017-5638","The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.","2017-03-11",9.8,"v3.1","Critical",0.99999,{"cveId":1433,"description":1434,"publishedDate":1435,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1438},"CVE-2018-11776","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.","2018-08-22",8.1,"High",0.99996,{"cveId":1440,"description":1441,"publishedDate":1442,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1443},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",0.99968,{"cveId":1445,"description":1446,"publishedDate":1015,"cvssScore":1447,"cvssVersion":1429,"severity":1437,"isKev":1448,"epssScore":1449},"CVE-2020-13379","The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user\u002Fclient to make Grafana send HTTP requests to any URL and return its result to the user\u002Fclient. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.",8.2,false,0.99856,{"cveId":1451,"description":1452,"publishedDate":1453,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1454},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-09-19",0.99707,{"cveId":1456,"description":1457,"publishedDate":1458,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1459},"CVE-2017-9805","The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.","2017-09-15",0.99396,{"cveId":1461,"description":1462,"publishedDate":1463,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1464},"CVE-2020-1938","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","2020-02-24",0.9927,{"cveId":1466,"description":1467,"publishedDate":1468,"cvssScore":1469,"cvssVersion":1429,"severity":1470,"isKev":1448,"epssScore":1471},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,"Medium",0.99215,{"cveId":1473,"description":1474,"publishedDate":1475,"cvssScore":1476,"cvssVersion":1429,"severity":1470,"isKev":1448,"epssScore":1477},"CVE-2018-15473","OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.","2018-08-17",5.3,0.98675,{"cveId":1479,"description":1480,"publishedDate":1481,"cvssScore":1482,"cvssVersion":1429,"severity":1437,"isKev":1448,"epssScore":1483},"CVE-2019-5736","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","2019-02-11",8.6,0.98452,[1485,1495,1504,1513,1521,1528,1536,1544,1553,1561,1571,1578,1586,1595,1602,1608,1617,1625,1633,1640,1649,1657,1665,1672,1674,1677,1680,1687,1694,1701,1708,1714,1721,1724,1732,1734,1737,1744,1751],{"cveId":1486,"description":1487,"publishedDate":1488,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1490,"cisaVulnName":1491,"cisaDateAdded":1492,"cisaShortDescription":1493,"cisaRequiredAction":1494},"CVE-2022-0995","An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.","2022-03-25",7.8,0.08859,"Linux Kernel Out-of-Bounds Write Vulnerability","2026-08-26","Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":1496,"description":1497,"publishedDate":1498,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1499,"cisaVulnName":1500,"cisaDateAdded":1501,"cisaShortDescription":1502,"cisaRequiredAction":1503},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":1505,"description":1506,"publishedDate":1507,"cvssScore":1489,"cvssVersion":1508,"severity":1437,"isKev":4,"epssScore":1509,"cisaVulnName":1510,"cisaDateAdded":1511,"cisaShortDescription":1512,"cisaRequiredAction":1503},"CVE-2018-14634","An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.","2018-09-25","v3.0",0.14689,"Linux Kernel Integer Overflow Vulnerability","2026-01-26","Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.",{"cveId":1514,"description":1515,"publishedDate":1516,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1517,"cisaVulnName":1518,"cisaDateAdded":1519,"cisaShortDescription":1520,"cisaRequiredAction":1503},"CVE-2021-22555","A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net\u002Fnetfilter\u002Fx_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space","2021-07-07",0.78684,"Linux Kernel Heap Out-of-Bounds Write Vulnerability","2025-10-06","Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.",{"cveId":1522,"description":1523,"publishedDate":54,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1524,"cisaVulnName":1525,"cisaDateAdded":1526,"cisaShortDescription":1527,"cisaRequiredAction":1503},"CVE-2024-54085","AMI’s SPx contains\na vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation\nof this vulnerability may lead to a loss of confidentiality, integrity, and\u002For\navailability.",0.60747,"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","2025-06-25","AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and\u002For availability.",{"cveId":1529,"description":1530,"publishedDate":86,"cvssScore":1531,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1532,"cisaVulnName":1533,"cisaDateAdded":1534,"cisaShortDescription":1535,"cisaRequiredAction":1503},"CVE-2024-38475","Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally\u002Fdirectly reachable by any URL, resulting in code execution or source code disclosure. \n\nSubstitutions in server context that use a backreferences or variables as the first segment of the substitution are affected.  Some unsafe RewiteRules will be broken by this change and the rewrite flag \"UnsafePrefixStat\" can be used to opt back in once ensuring the substitution is appropriately constrained.",9.1,0.99957,"Apache HTTP Server Improper Escaping of Output Vulnerability","2025-05-01","Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally\u002Fdirectly reachable by any URL, resulting in code execution or source code disclosure.",{"cveId":1537,"description":1538,"publishedDate":1539,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1540,"cisaVulnName":1541,"cisaDateAdded":1542,"cisaShortDescription":1543,"cisaRequiredAction":1503},"CVE-2025-24813","Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and\u002For Information disclosure and\u002For malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nIf all of the following were true, a malicious user was able to view       security sensitive files and\u002For inject content into those files:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads\n- attacker knowledge of the names of security sensitive files being uploaded\n- the security sensitive files also being uploaded via partial PUT\n\nIf all of the following were true, a malicious user was able to       perform remote code execution:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- application was using Tomcat's file based session persistence with the default storage location\n- application included a library that may be leveraged in a deserialization attack\n\nUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.","2025-03-10",0.99942,"Apache Tomcat Path Equivalence Vulnerability","2025-04-01","Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.",{"cveId":1545,"description":1546,"publishedDate":1547,"cvssScore":48,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1548,"cisaVulnName":1549,"cisaDateAdded":1550,"cisaShortDescription":1551,"cisaRequiredAction":1552},"CVE-2025-0411","7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.","2025-01-25",0.67071,"7-Zip Mark of the Web Bypass Vulnerability","2025-02-06","7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":1554,"description":1555,"publishedDate":1468,"cvssScore":1556,"cvssVersion":1429,"severity":1470,"isKev":4,"epssScore":1557,"cisaVulnName":1558,"cisaDateAdded":1559,"cisaShortDescription":1560,"cisaRequiredAction":1552},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",6.9,0.84887,"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.",{"cveId":1562,"description":1563,"publishedDate":1564,"cvssScore":1565,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1566,"cisaVulnName":1567,"cisaDateAdded":1568,"cisaShortDescription":1569,"cisaRequiredAction":1570},"CVE-2022-0185","A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.","2022-02-11",8.4,0.25151,"Linux Kernel Heap-Based Buffer Overflow Vulnerability","2024-08-21","Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":1572,"description":1573,"publishedDate":1574,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1575,"cisaVulnName":1576,"cisaDateAdded":775,"cisaShortDescription":1577,"cisaRequiredAction":1552},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",0.28058,"Linux Kernel Use-After-Free Vulnerability","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",{"cveId":1579,"description":1580,"publishedDate":1581,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1582,"cisaVulnName":1583,"cisaDateAdded":1584,"cisaShortDescription":1585,"cisaRequiredAction":1552},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":1587,"description":1588,"publishedDate":417,"cvssScore":1589,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1590,"cisaVulnName":1591,"cisaDateAdded":1592,"cisaShortDescription":1593,"cisaRequiredAction":1594},"CVE-2023-29552","The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.",7.5,0.63975,"Service Location Protocol (SLP) Denial-of-Service Vulnerability","2023-11-08","The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.","Apply mitigations per vendor instructions or disable SLP service or port 427\u002FUDP on all systems running on untrusted networks, including those directly connected to the Internet.",{"cveId":1596,"description":1597,"publishedDate":293,"cvssScore":32,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1598,"cisaVulnName":1599,"cisaDateAdded":1600,"cisaShortDescription":1601,"cisaRequiredAction":1552},"CVE-2023-46604","The Java OpenWire protocol marshaller is vulnerable to Remote Code \nExecution. This vulnerability may allow a remote attacker with network \naccess to either a Java-based OpenWire broker or client to run arbitrary\n shell commands by manipulating serialized class types in the OpenWire \nprotocol to cause either the client or the broker (respectively) to \ninstantiate any class on the classpath.\n\nUsers are recommended to upgrade\n both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 \nwhich fixes this issue.",0.99891,"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","2023-11-02","Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.",{"cveId":1603,"description":1604,"publishedDate":1605,"cvssScore":1589,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1431,"cisaVulnName":1606,"cisaDateAdded":1605,"cisaShortDescription":1607,"cisaRequiredAction":1503},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10","HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":1609,"description":1610,"publishedDate":1611,"cvssScore":1612,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1613,"cisaVulnName":1614,"cisaDateAdded":1615,"cisaShortDescription":1616,"cisaRequiredAction":1552},"CVE-2023-41993","The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","2023-09-21",8.8,0.24349,"Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1618,"description":1619,"publishedDate":1620,"cvssScore":1612,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1621,"cisaVulnName":1622,"cisaDateAdded":1623,"cisaShortDescription":1624,"cisaRequiredAction":1552},"CVE-2023-4863","Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)","2023-09-12",0.99979,"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","2023-09-13","Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.",{"cveId":1626,"description":1627,"publishedDate":1156,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1628,"cisaVulnName":1629,"cisaDateAdded":1630,"cisaShortDescription":1631,"cisaRequiredAction":1632},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.",0.92334,"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":1634,"description":1635,"publishedDate":1636,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1637,"cisaVulnName":1638,"cisaDateAdded":1630,"cisaShortDescription":1639,"cisaRequiredAction":1632},"CVE-2016-8735","Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","2017-04-06",0.90338,"Apache Tomcat Remote Code Execution Vulnerability","Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.",{"cveId":1641,"description":1642,"publishedDate":1643,"cvssScore":1644,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1645,"cisaVulnName":1646,"cisaDateAdded":1647,"cisaShortDescription":1648,"cisaRequiredAction":1632},"CVE-2021-39144","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","2021-08-23",8.5,0.98124,"XStream Remote Code Execution Vulnerability","2023-03-10","XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.",{"cveId":1650,"description":1651,"publishedDate":1652,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1653,"cisaVulnName":1654,"cisaDateAdded":1655,"cisaShortDescription":1656,"cisaRequiredAction":1632},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.92795,"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":1658,"description":1659,"publishedDate":1660,"cvssScore":1661,"cvssVersion":1429,"severity":1470,"isKev":4,"epssScore":1662,"cisaVulnName":1654,"cisaDateAdded":1663,"cisaShortDescription":1664,"cisaRequiredAction":1632},"CVE-2021-22600","A double free bug in packet_set_ring() in net\u002Fpacket\u002Faf_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755","2022-01-26",6.6,0.06586,"2022-04-11","Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.",{"cveId":1666,"description":1667,"publishedDate":554,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1668,"cisaVulnName":1669,"cisaDateAdded":1670,"cisaShortDescription":1671,"cisaRequiredAction":1632},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.",0.99962,"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.",{"cveId":1440,"description":1441,"publishedDate":1442,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1443,"cisaVulnName":1638,"cisaDateAdded":1488,"cisaShortDescription":1673,"cisaRequiredAction":1632},"When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":1451,"description":1452,"publishedDate":1453,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1454,"cisaVulnName":1675,"cisaDateAdded":1488,"cisaShortDescription":1676,"cisaRequiredAction":1632},"Apache Tomcat on Windows Remote Code Execution Vulnerability","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":1461,"description":1462,"publishedDate":1463,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1464,"cisaVulnName":1678,"cisaDateAdded":1498,"cisaShortDescription":1679,"cisaRequiredAction":1632},"Apache Tomcat Improper Privilege Management Vulnerability","Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.",{"cveId":1681,"description":1682,"publishedDate":1683,"cvssScore":48,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1684,"cisaVulnName":1685,"cisaDateAdded":1498,"cisaShortDescription":1686,"cisaRequiredAction":1632},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",0.83524,"Linux Kernel Race Condition Vulnerability","Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":1688,"description":1689,"publishedDate":1690,"cvssScore":32,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1431,"cisaVulnName":1691,"cisaDateAdded":1690,"cisaShortDescription":1692,"cisaRequiredAction":1693},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10","Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"cveId":1695,"description":1696,"publishedDate":1697,"cvssScore":1612,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1698,"cisaVulnName":1699,"cisaDateAdded":1690,"cisaShortDescription":1700,"cisaRequiredAction":1632},"CVE-2010-1871","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.","2010-08-05",0.83397,"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.",{"cveId":1702,"description":1703,"publishedDate":1704,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1705,"cisaVulnName":1706,"cisaDateAdded":1690,"cisaShortDescription":1707,"cisaRequiredAction":1632},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,"Linux Kernel Improper Privilege Management Vulnerability","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.",{"cveId":1709,"description":1710,"publishedDate":1711,"cvssScore":21,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1431,"cisaVulnName":1712,"cisaDateAdded":1713,"cisaShortDescription":1710,"cisaRequiredAction":1632},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":1715,"description":1716,"publishedDate":733,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1717,"cisaVulnName":1718,"cisaDateAdded":1719,"cisaShortDescription":1720,"cisaRequiredAction":1632},"CVE-2021-42013","It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration \"require all denied\", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.",0.99964,"Apache HTTP Server Path Traversal Vulnerability","2021-11-03","Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.",{"cveId":1425,"description":1426,"publishedDate":1427,"cvssScore":1428,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1431,"cisaVulnName":1722,"cisaDateAdded":1719,"cisaShortDescription":1723,"cisaRequiredAction":1632},"Apache Struts Remote Code Execution Vulnerability","Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.",{"cveId":1725,"description":1726,"publishedDate":1727,"cvssScore":1728,"cvssVersion":1429,"severity":1430,"isKev":4,"epssScore":1729,"cisaVulnName":1730,"cisaDateAdded":1719,"cisaShortDescription":1731,"cisaRequiredAction":1632},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",9.6,0.63894,"Google Chrome FreeType Heap Buffer Overflow Vulnerability","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.",{"cveId":1433,"description":1434,"publishedDate":1435,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1438,"cisaVulnName":1722,"cisaDateAdded":1719,"cisaShortDescription":1733,"cisaRequiredAction":1632},"Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespace option is true and the value isn't set for a result defined in underlying configurations and in same time, its upper package configuration have no or wildcard namespace.  Or, using URL tag which doesn't have value and action set and in same time, its upper package configuration have no or wildcard namespace.",{"cveId":1456,"description":1457,"publishedDate":1458,"cvssScore":1436,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1459,"cisaVulnName":1735,"cisaDateAdded":1719,"cisaShortDescription":1736,"cisaRequiredAction":1632},"Apache Struts Deserialization of Untrusted Data Vulnerability","Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads.",{"cveId":1738,"description":1739,"publishedDate":1740,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1741,"cisaVulnName":1742,"cisaDateAdded":1719,"cisaShortDescription":1743,"cisaRequiredAction":1632},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",0.72105,"Android Kernel Use-After-Free Vulnerability","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"cveId":1745,"description":1746,"publishedDate":1747,"cvssScore":1489,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1748,"cisaVulnName":1749,"cisaDateAdded":1719,"cisaShortDescription":1750,"cisaRequiredAction":1632},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"cveId":1752,"description":1753,"publishedDate":1754,"cvssScore":1589,"cvssVersion":1429,"severity":1437,"isKev":4,"epssScore":1755,"cisaVulnName":1718,"cisaDateAdded":1719,"cisaShortDescription":1756,"cisaRequiredAction":1632},"CVE-2021-41773","A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration \"require all denied\", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.","2021-10-05",0.99992,"Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.",[1758,1759,1760,1761,1762,1763,1764,1765,1766,1767],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":21,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":41,"last_cve_update":42},{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":48,"last_cve_update":49},{"id":51,"product_name":52,"version_count":46,"cve_count":53,"kev_count":48,"last_cve_update":54},{"id":56,"product_name":57,"version_count":46,"cve_count":53,"kev_count":48,"last_cve_update":54},{"id":59,"product_name":60,"version_count":46,"cve_count":61,"kev_count":48,"last_cve_update":54},{"id":63,"product_name":64,"version_count":46,"cve_count":65,"kev_count":48,"last_cve_update":54},{"id":67,"product_name":68,"version_count":46,"cve_count":69,"kev_count":48,"last_cve_update":54},{"title":1769,"metaDescription":1770,"keywords":1771,"structuredData":1772},"Netapp - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Netapp covering 395 products with 2458 tracked vulnerabilities including 12 critical and 25 high-severity issues and 37 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netapp vulnerabilities, Netapp security, Netapp CVE, Netapp threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Netapp KEV, Netapp exploited vulnerabilities",{"@context":1773,"@type":1774,"name":1775,"description":1770,"url":1776},"https:\u002F\u002Fschema.org","Organization","Netapp","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fnetapp",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":1778,"apiVersion":1779},"2026-10-28T14:30:55.151Z","3.0"]