928 matches found
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: rabbitmq-cluster-operator, gotrue, crossplane-provider-aws-lightsail-fips, zitadel, step-fips, kubeflow-pipelines-fips, local-path-provisioner, envconsul-fips, crossplane-provider-aws-pinpoint, flux-helm-controller, crossplane-provider-aws-inspector2-fips,...
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: rabbitmq-cluster-operator, gotrue, crossplane-provider-aws-lightsail-fips, zitadel, step-fips, kubeflow-pipelines-fips, local-path-provisioner, envconsul-fips, crossplane-provider-aws-pinpoint, flux-helm-controller, crossplane-provider-aws-inspector2-fips,...
PT-2026-108739
Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An issue exists in the semop2 function where it releases the per-set lock and sleeps while waiting for a semaphore condition. Upon waking, the function uses a 15-bit sequence number...
PT-2026-108736
Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description When fdescfs4 is mounted in a jail using the "nodup" option, opening the '/dev/fd/N' endpoint returns a descriptor that fails to inherit the Capsicum capability rights or the FD RESOL...
PT-2026-108738
Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An issue exists where SCM RIGHTS file descriptor passing fails to preserve the FD RESOLVE BENEATH restriction during descriptor transfer. A process can bypass this restriction by...
PT-2026-108735
Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An off-by-one bug exists in the code that searches for the inner record type in TLS 1.3, where the actual record type is embedded as the last non-zero byte of the decrypted payload. A...
PT-2026-108737
Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description The renameat2 function fails to enforce FD RESOLVE BENEATH on its directory arguments. This allows a jailed process to rename a directory relative to a restricted descriptor and...
Release Information for NetApp ONTAP Plug-In for Veeam Backup & Replication
This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing NetApp ONTAP Plug-In v2.0.14, ensure that you are running at least Veeam Backup &...
EUVD-2026-47770
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication MFA configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA...
Factoring RSA Keys with Many Zeros
Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild. The badkeys project is an open-source service that checks public keys for known vulnerabilities. While developing this tool, Hanno collected a massive number of...
GHSA-MPWR-8VM7-H73F vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-netapp, external-secrets-fips, crossplane-provider-azure-securityinsights, crossplane-provider-azure-policyinsights, crossplane-provider-azure-servicefabric, crossplane-provider-azure-synapse, crossplane-provider-azure-operationalinsights,...
NetApp Active IQ OneCollect security vulnerability
NetApp Active IQ OneCollect is a platform provided by the US-based NetApp company that collects, analyzes, and validates diagnostic data from storage infrastructure. Version 2.7.3 of NetApp Active IQ OneCollect contains a security vulnerability. This vulnerability stems from the use of hardcoded...
NetApp StorageGRID security vulnerabilities
NetApp StorageGRID is a object storage solution developed by the American network equipment company NetApp. Versions of NetApp StorageGRID prior to 11.9.0.13 and 12.0.0.6 contained security vulnerabilities. These vulnerabilities were due to information leakage issues, which could allow authorized...
CVE-2021-27007
NetApp Virtual Desktop Service VDS when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session...
Exploit for Out-of-bounds Write in Netapp Bootstrap_Os
Typeform DevSecOps Pipeline POC !Pythonhttps://img.shields...
NetApp ONTAP S3 Information Disclosure Vulnerability (NTAP-20260304-0001)
The version of NetApp ONTAP running on the remote host is 9.12.1 prior to 9.12.1P20, 9.13.x prior to 9.13.1P19, 9.14.x prior to 9.14.1P16, 9.15.x prior to 9.15.1P16, 9.16.x prior to 9.16.1P8, 9.17.x prior to 9.17.1P1, or 9.18.x prior to 9.18.1. It is, therefore, affected by an Information...
EUVD-2026-9509
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission...
NetApp ONTAP security vulnerabilities
NetApp ONTAP is a proprietary operating system developed by the American network device company NetApp. It is used for storing disk arrays. NetApp ONTAP 9.12.1 and later versions have security vulnerabilities, which stem from improper access control of S3 NAS buckets, potentially leading to...