netapp bootstrap os güvenlik açıkları (CVE)

netapp bootstrap os için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

11 sonuç
4.8Orta
CVE-2025-30691
Oracle Corporation Oracle Java SE

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mul…

2.8Düşük
CVE-2025-1215

vim main.c memory corruption

vim

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host…

7.0Yüksek
CVE-2025-0665

eventfd double close

curl curl; Siemens RUGGEDCOM RST2428P; Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family; Siemens SCALANCE XCH328

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.

1.3%EPSS
3.4Düşük
CVE-2025-0167

netrc and default credential leak

curl curl; Siemens RUGGEDCOM RST2428P; Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family; Siemens SCALANCE XCH328

When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` en…

4.8Orta
CVE-2025-21502
Oracle Corporation Oracle Java SE

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle Graal…

4.2Orta
CVE-2025-22134

heap-buffer-overflow with visual mode in Vim < 9.1.1003

vim vim

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.…

7.8Yüksek
CVE-2024-1086 KEV Fidye yazılımında kullanılıyor

Use-after-free in Linux kernel's netfilter: nf_tables component

Linux Kernel; linux linux_kernel

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_…

28%EPSS
7.8Yüksek
CVE-2023-4911 KEV

Glibc: buffer overflow in ld.so leading to privilege escalation

glibc; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…

64%EPSS
7.8Yüksek
CVE-2022-0492 KEV

Linux Kernel Improper Authentication Vulnerability

kernel

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespac…

5.5%EPSS