HF
Product
H410c Firmware
On CISA KEVExploited in the wildRansomware-linked
240
CVEs
13
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 158Medium 72Low 3
Watch
Add H410c Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54085 In wildKEV | 9.8 | Mar 11 | Redfish Authentication Bypass Affected: All versions, or not specified |
| CVE-2022-0185 In wildKEV | 8.4 | Feb 11 | Linux Kernel Heap-Based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: All versions, or not specified |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: All versions, or not specified |
| CVE-2023-0386 In wildKEV | 7.8 | Mar 22 | Linux Kernel Improper Ownership Management Vulnerability Affected: All versions, or not specified |
| CVE-2022-0995 In wildKEV | 7.8 | Mar 25 | Linux Kernel Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: All versions, or not specified |
| CVE-2021-22555 In wildKEV | 7.8 | Jul 7 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Affected: All versions, or not specified |
| CVE-2019-2215 In wildKEV | 7.8 | Oct 11 | Android Kernel Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: All versions, or not specified |
| CVE-2021-22600 In wildKEV | 7.0 | Jan 26 | Double Free in net/packet/af_packet.c leading to priviledge escalation Affected: All versions, or not specified |
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: All versions, or not specified |
| CVE-2024-56171 | 9.8 | Feb 18 | libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c Affected: All versions, or not specified |
| CVE-2022-2274 | 9.8 | Jul 1 | RSA implementation bug in AVX512IFMA instructions Affected: All versions, or not specified |
| CVE-2022-29155 | 9.8 | May 4 | In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query Affected: All versions, or not specified |
| CVE-2024-40896 | 9.1 | Dec 23 | In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override… Affected: All versions, or not specified |
| CVE-2022-1587 | 9.1 | May 16 | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file Affected: All versions, or not specified |
| CVE-2022-1586 | 9.1 | May 16 | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file Affected: All versions, or not specified |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: All versions, or not specified |
| CVE-2017-9078 | 8.8 | May 19 | The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled Affected: All versions, or not specified |
| CVE-2024-33599 | 8.1 | May 6 | nscd: Stack-based buffer overflow in netgroup cache Affected: All versions, or not specified |
| CVE-2023-35788 | 7.8 | Jun 16 | An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7 Affected: All versions, or not specified |
| CVE-2023-3111 | 7.8 | Jun 5 | A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel Affected: All versions, or not specified |
| CVE-2023-2124 | 7.8 | May 15 | An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal) Affected: All versions, or not specified |
| CVE-2023-2007 | 7.8 | Apr 24 | The specific flaw exists within the DPT I2O Controller driver Affected: All versions, or not specified |
| CVE-2023-28464 | 7.8 | Mar 31 | hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and… Affected: All versions, or not specified |
| CVE-2022-4696 | 7.8 | Jan 11 | There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation Affected: All versions, or not specified |
| CVE-2022-47521 | 7.8 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-47519 | 7.8 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-47518 | 7.8 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-45934 | 7.8 | Nov 27 | An issue was discovered in the Linux kernel through 6.0.10 Affected: All versions, or not specified |
| CVE-2022-40304 | 7.8 | Nov 23 | An issue was discovered in libxml2 before 2.10.3 Affected: All versions, or not specified |
| CVE-2022-3545 | 7.8 | Oct 17 | Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free Affected: All versions, or not specified |
| CVE-2022-2964 | 7.8 | Sep 9 | A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices Affected: All versions, or not specified |
| CVE-2021-3999 | 7.8 | Aug 24 | A flaw was found in glibc Affected: All versions, or not specified |
| CVE-2022-2938 | 7.8 | Aug 23 | A flaw was found in the Linux kernel's implementation of Pressure Stall Information Affected: All versions, or not specified |
| CVE-2022-36123 | 7.8 | Jul 29 | The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss) Affected: All versions, or not specified |
| CVE-2022-2327 | 7.8 | Jul 22 | Use-after-free in io_uring ad work_flags in Linux Kernel Affected: All versions, or not specified |
| CVE-2022-34918 | 7.8 | Jul 4 | An issue was discovered in the Linux kernel through 5.18.9 Affected: All versions, or not specified |
| CVE-2022-1998 | 7.8 | Jun 9 | A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user() Affected: All versions, or not specified |
| CVE-2022-32250 | 7.8 | Jun 2 | net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect… Affected: All versions, or not specified |
| CVE-2022-1786 | 7.8 | Jun 2 | A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions… Affected: All versions, or not specified |
| CVE-2022-1652 | 7.8 | Jun 2 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function Affected: All versions, or not specified |
| CVE-2022-1882 | 7.8 | May 26 | A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is… Affected: All versions, or not specified |
| CVE-2022-29581 | 7.8 | May 17 | Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root Affected: All versions, or not specified |
| CVE-2022-1679 | 7.8 | May 16 | A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input… Affected: All versions, or not specified |
| CVE-2022-30594 | 7.8 | May 12 | The Linux kernel before 5.17.2 mishandles seccomp permissions Affected: All versions, or not specified |
| CVE-2022-29968 | 7.8 | May 2 | An issue was discovered in the Linux kernel through 5.17.5 Affected: All versions, or not specified |
| CVE-2022-29156 | 7.8 | Apr 13 | drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release Affected: All versions, or not specified |
