Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (360226 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-27020 1 Puppet 1 Puppet Enterprise 2024-11-21 8.8 High
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.
CVE-2021-27019 1 Puppet 2 Puppet Enterprise, Puppetdb 2024-11-21 4.3 Medium
PuppetDB logging included potentially sensitive system information.
CVE-2021-27018 1 Puppet 1 Remediate 2024-11-21 7.5 High
The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.
CVE-2021-27007 1 Netapp 1 Virtual Desktop Service 2024-11-21 9.8 Critical
NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session.
CVE-2021-27006 1 Netapp 1 Storagegrid 2024-11-21 4.4 Medium
StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may allow an administrative user to escalate their privileges and modify settings in SANtricity System Manager.
CVE-2021-27005 1 Netapp 1 Ontap System Manager 2024-11-21 7.5 High
Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.
CVE-2021-27004 1 Netapp 1 Ontap System Manager 2024-11-21 5.5 Medium
System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials.
CVE-2021-27003 1 Netapp 1 Clustered Data Ontap 2024-11-21 4.7 Medium
Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack.
CVE-2021-27002 1 Netapp 1 Cloud Manager 2024-11-21 7.5 High
NetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to retrieve sensitive data via the web proxy.
CVE-2021-27001 1 Netapp 1 Clustered Data Ontap 2024-11-21 5.5 Medium
Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period.
CVE-2021-26999 1 Netapp 1 Cloud Manager 2024-11-21 4.3 Medium
NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version.
CVE-2021-26998 1 Netapp 1 Cloud Manager 2024-11-21 4.3 Medium
NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version.
CVE-2021-26997 1 Netapp 1 E-series Santricity Os Controller 2024-11-21 6.5 Medium
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks.
CVE-2021-26996 1 Netapp 1 E-series Santricity Os Controller 2024-11-21 7.5 High
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks.
CVE-2021-26995 1 Netapp 1 E-series Santricity Os Controller 2024-11-21 8.8 High
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code.
CVE-2021-26994 1 Netapp 1 Clustered Data Ontap 2024-11-21 6.5 Medium
Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a Denial of Service (DoS) on a cluster node.
CVE-2021-26993 1 Netapp 1 E-series Santricity Os Controller 2024-11-21 5.3 Medium
E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to cause a partial Denial of Service (DoS) to the web server.
CVE-2021-26992 1 Netapp 1 Cloud Manager 2024-11-21 7.5 High
Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service (DoS).
CVE-2021-26991 1 Netapp 1 Cloud Manager 2024-11-21 7.5 High
Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker to interact with Cloud Manager.
CVE-2021-26990 1 Netapp 1 Cloud Manager 2024-11-21 9.1 Critical
Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a remote attacker to overwrite arbitrary system files.