Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 249

Export CSV
CVE-2022-25844

Regular Expression Denial of Service (ReDoS)

The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat() of NUMBER_FORMATS.PATTERNS[1].posPre with a very high value. **Note:** 1) This package has been deprecated and is no longer maintained. 2) The vulnerable versions are 1.7.0 and higher.

CVSS 3.1 · 5.3 Medium EPSS 4.9% KEV · Not listed
Vendors
Angularjs Fedoraproject Netapp
Products
Angularjs Fedora Ontap Select Deploy Administration Utility
CVE-2024-38475

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected.  Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.

CVSS 3.1 · 9.1 Critical EPSS 100.0% KEV · Listed
Vendors
Apache Netapp Redhat and 1 more
Products
Http Server Ontap 9 Enterprise Linux and 16 more
CVE-2021-3156

sudo: Heap buffer overflow in argument parsing

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

CVSS 3.1 · 7.8 High EPSS 100.0% KEV · Listed
Vendors
Beyondtrust Debian Fedoraproject and 6 more
Products
Privilege Management For Mac Privilege Management For Unix\/linux Debian Linux and 35 more
CVE-2024-36387

Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance.

CVSS 3.1 · 5.4 Medium EPSS 1.7% KEV · Not listed
Vendors
Apache Netapp Redhat
Products
Http Server Ontap Enterprise Linux and 1 more
CVE-2024-27316

Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.

CVSS 3.1 · 7.5 High EPSS 88.8% KEV · Not listed
Vendors
Apache Fedoraproject Netapp and 1 more
Products
Http Server Fedora Ontap and 4 more
CVE-2023-38709

Apache HTTP Server: HTTP response splitting

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.

CVSS 3.1 · 7.3 High EPSS 3.9% KEV · Not listed
Vendors
Apache Apple Broadcom and 4 more
Products
Http Server Macos Fabric Operating System and 6 more
CVE-2024-8932

OOB access in ldap_escape

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Netapp Php Php Group
Products
Ontap Php Php
CVE-2024-39573

Apache HTTP Server: mod_rewrite proxy handler substitution

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CVSS 3.1 · 7.5 High EPSS 35.4% KEV · Not listed
Vendors
Apache Netapp Redhat
Products
Http Server Ontap Enterprise Linux and 2 more
CVE-2025-1861

Stream HTTP wrapper truncates redirect location to 1024 bytes

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp Php Redhat
Products
Ontap Php Enterprise Linux
CVE-2025-1736

Stream HTTP wrapper header check might omit basic auth header

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp Php Redhat
Products
Ontap Php Enterprise Linux
CVE-2025-1734

Streams HTTP wrapper does not fail for headers with invalid name and no colon

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp Php Redhat
Products
Ontap Php Enterprise Linux
CVE-2024-56171

libxml2: Use-After-Free in libxml2

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Netapp Redhat Xmlsoft
Products
Active Iq Unified Manager H300s H300s Firmware and 25 more
CVE-2024-53580

iperf: Denial of Service in iperf Due to Improper JSON Handling

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Es Netapp Redhat
Products
Iperf3 Hci Compute Node Ontap 9 and 6 more
CVE-2024-49761

REXML ReDoS vulnerability

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

CVSS 4.0 · 6.6 Medium EPSS 1.4% KEV · Not listed
Vendors
Netapp Redhat Ruby and 1 more
Products
Ontap Tools Enterprise Linux Rhel Aus and 6 more
CVE-2024-38286

Apache Tomcat: Denial of Service

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.35 through 8.5.100 and 7.0.92 through 7.0.109. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25, or 9.0.90, which fixes the issue. Apache Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.

CVSS 3.1 · 8.6 High EPSS 1.7% KEV · Not listed
Vendors
Apache Netapp Redhat
Products
Tomcat Ontap Tools Enterprise Linux and 5 more
CVE-2024-34750

Apache Tomcat: HTTP/2 excess header handling DoS

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Apache Netapp Redhat
Products
Tomcat Ontap Tools Enterprise Linux and 2 more
CVE-2020-15999

freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 9.6 Critical EPSS 63.9% KEV · Listed
Vendors
Debian Fedoraproject Freetype and 4 more
Products
Debian Linux Fedora Freetype and 7 more
CVE-2024-7254

Stack overflow in Protocol Buffers Java Lite

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.

CVSS 4.0 · 8.7 High EPSS 2.8% KEV · Not listed
Vendors
Google Netapp Redhat
Products
Google-protobuf Protobuf Protobuf-java and 12 more
CVE-2021-28165

jetty: Resource exhaustion when receiving an invalid large TLS frame

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.

CVSS 3.1 · 7.5 High EPSS 53.9% KEV · Not listed
Vendors
Eclipse Jenkins Netapp and 2 more
Products
Jetty Jenkins Cloud Manager and 25 more
CVE-2018-25032

zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS 3.1 · 7.5 High EPSS 51.7% KEV · Not listed
Vendors
Apple Azul Debian and 10 more
Products
Mac Os X Macos Zulu and 44 more