HF
Product
H700s Firmware
On CISA KEVExploited in the wildRansomware-linked
293
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 183Medium 88Low 5
Watch
Add H700s Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0185 In wildKEV | 8.4 | Feb 11 | Linux Kernel Heap-Based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: All versions, or not specified |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: All versions, or not specified |
| CVE-2023-0386 In wildKEV | 7.8 | Mar 22 | Linux Kernel Improper Ownership Management Vulnerability Affected: All versions, or not specified |
| CVE-2022-0995 In wildKEV | 7.8 | Mar 25 | Linux Kernel Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: All versions, or not specified |
| CVE-2021-22555 In wildKEV | 7.8 | Jul 7 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Affected: All versions, or not specified |
| CVE-2019-2215 In wildKEV | 7.8 | Oct 11 | Android Kernel Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2021-22600 In wildKEV | 7.0 | Jan 26 | Double Free in net/packet/af_packet.c leading to priviledge escalation Affected: All versions, or not specified |
| CVE-2023-27534 | 8.8 | Mar 30 | A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in… Affected: All versions, or not specified |
| CVE-2023-27533 | 8.8 | Mar 30 | A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet… Affected: All versions, or not specified |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: All versions, or not specified |
| CVE-2022-27223 | 8.8 | Mar 16 | In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access Affected: All versions, or not specified |
| CVE-2017-5123 | 8.8 | Nov 2 | Insufficient data validation in waitid allowed an user to escape sandboxes on Linux Affected: All versions, or not specified |
| CVE-2021-28660 | 8.8 | Mar 17 | rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array Affected: All versions, or not specified |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: All versions, or not specified |
| CVE-2024-2398 | 8.6 | Mar 27 | HTTP/2 push headers memory-leak Affected: All versions, or not specified |
| CVE-2024-33599 | 8.1 | May 6 | nscd: Stack-based buffer overflow in netgroup cache Affected: All versions, or not specified |
| CVE-2022-42915 | 8.1 | Oct 29 | curl before 7.86.0 has a double free Affected: All versions, or not specified |
| CVE-2022-27778 | 8.1 | Jun 1 | A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error` Affected: All versions, or not specified |
| CVE-2022-22576 | 8.1 | May 26 | An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that… Affected: All versions, or not specified |
| CVE-2021-22901 | 8.1 | Jun 11 | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection Affected: All versions, or not specified |
| CVE-2021-4157 | 8.0 | Mar 25 | An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS) Affected: All versions, or not specified |
| CVE-2023-35788 | 7.8 | Jun 16 | An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7 Affected: All versions, or not specified |
| CVE-2023-3111 | 7.8 | Jun 5 | A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel Affected: All versions, or not specified |
| CVE-2023-2124 | 7.8 | May 15 | An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal) Affected: All versions, or not specified |
| CVE-2023-2007 | 7.8 | Apr 24 | The specific flaw exists within the DPT I2O Controller driver Affected: All versions, or not specified |
| CVE-2023-28464 | 7.8 | Mar 31 | hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and… Affected: All versions, or not specified |
| CVE-2022-4696 | 7.8 | Jan 11 | There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation Affected: All versions, or not specified |
| CVE-2022-47521 | 7.8 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-47519 | 7.8 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-47518 | 7.8 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-45934 | 7.8 | Nov 27 | An issue was discovered in the Linux kernel through 6.0.10 Affected: All versions, or not specified |
| CVE-2022-40304 | 7.8 | Nov 23 | An issue was discovered in libxml2 before 2.10.3 Affected: All versions, or not specified |
| CVE-2022-3545 | 7.8 | Oct 17 | Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free Affected: All versions, or not specified |
| CVE-2022-2964 | 7.8 | Sep 9 | A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices Affected: All versions, or not specified |
| CVE-2021-3999 | 7.8 | Aug 24 | A flaw was found in glibc Affected: All versions, or not specified |
| CVE-2022-2938 | 7.8 | Aug 23 | A flaw was found in the Linux kernel's implementation of Pressure Stall Information Affected: All versions, or not specified |
| CVE-2022-36123 | 7.8 | Jul 29 | The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss) Affected: All versions, or not specified |
| CVE-2022-2327 | 7.8 | Jul 22 | Use-after-free in io_uring ad work_flags in Linux Kernel Affected: All versions, or not specified |
| CVE-2022-34918 | 7.8 | Jul 4 | An issue was discovered in the Linux kernel through 5.18.9 Affected: All versions, or not specified |
| CVE-2022-1998 | 7.8 | Jun 9 | A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user() Affected: All versions, or not specified |
| CVE-2022-32250 | 7.8 | Jun 2 | net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect… Affected: All versions, or not specified |
| CVE-2022-1786 | 7.8 | Jun 2 | A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions… Affected: All versions, or not specified |
| CVE-2022-1652 | 7.8 | Jun 2 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function Affected: All versions, or not specified |
| CVE-2022-1882 | 7.8 | May 26 | A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is… Affected: All versions, or not specified |
| CVE-2022-29581 | 7.8 | May 17 | Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root Affected: All versions, or not specified |
| CVE-2022-1116 | 7.8 | May 17 | Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root Affected: All versions, or not specified |
| CVE-2022-1679 | 7.8 | May 16 | A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input… Affected: All versions, or not specified |
