HF
Product
H700s Firmware
On CISA KEVExploited in the wildRansomware-linked
293
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 183Medium 88Low 5
Watch
Add H700s Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47518 | 7.8 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-45934 | 7.8 | Nov 27 | An issue was discovered in the Linux kernel through 6.0.10 Affected: All versions, or not specified |
| CVE-2022-40304 | 7.8 | Nov 23 | An issue was discovered in libxml2 before 2.10.3 Affected: All versions, or not specified |
| CVE-2022-3545 | 7.8 | Oct 17 | Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free Affected: All versions, or not specified |
| CVE-2022-2964 | 7.8 | Sep 9 | A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices Affected: All versions, or not specified |
| CVE-2021-3999 | 7.8 | Aug 24 | A flaw was found in glibc Affected: All versions, or not specified |
| CVE-2022-2938 | 7.8 | Aug 23 | A flaw was found in the Linux kernel's implementation of Pressure Stall Information Affected: All versions, or not specified |
| CVE-2022-36123 | 7.8 | Jul 29 | The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss) Affected: All versions, or not specified |
| CVE-2022-2327 | 7.8 | Jul 22 | Use-after-free in io_uring ad work_flags in Linux Kernel Affected: All versions, or not specified |
| CVE-2022-34918 | 7.8 | Jul 4 | An issue was discovered in the Linux kernel through 5.18.9 Affected: All versions, or not specified |
| CVE-2022-1998 | 7.8 | Jun 9 | A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user() Affected: All versions, or not specified |
| CVE-2022-32250 | 7.8 | Jun 2 | net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect… Affected: All versions, or not specified |
| CVE-2022-1786 | 7.8 | Jun 2 | A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions… Affected: All versions, or not specified |
| CVE-2022-1652 | 7.8 | Jun 2 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function Affected: All versions, or not specified |
| CVE-2022-1882 | 7.8 | May 26 | A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is… Affected: All versions, or not specified |
| CVE-2022-29581 | 7.8 | May 17 | Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root Affected: All versions, or not specified |
| CVE-2022-1116 | 7.8 | May 17 | Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root Affected: All versions, or not specified |
| CVE-2022-1679 | 7.8 | May 16 | A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input… Affected: All versions, or not specified |
| CVE-2022-30594 | 7.8 | May 12 | The Linux kernel before 5.17.2 mishandles seccomp permissions Affected: All versions, or not specified |
| CVE-2022-29968 | 7.8 | May 2 | An issue was discovered in the Linux kernel through 5.17.5 Affected: All versions, or not specified |
| CVE-2022-29156 | 7.8 | Apr 13 | drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release Affected: All versions, or not specified |
| CVE-2022-28893 | 7.8 | Apr 11 | The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state Affected: All versions, or not specified |
| CVE-2022-0998 | 7.8 | Mar 30 | An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function Affected: All versions, or not specified |
| CVE-2022-1055 | 7.8 | Mar 29 | A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation Affected: All versions, or not specified |
| CVE-2022-0330 | 7.8 | Mar 25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU Affected: All versions, or not specified |
| CVE-2022-0500 | 7.8 | Mar 25 | A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads… Affected: All versions, or not specified |
| CVE-2021-4197 | 7.8 | Mar 23 | An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process… Affected: All versions, or not specified |
| CVE-2022-27666 | 7.8 | Mar 23 | A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c Affected: All versions, or not specified |
| CVE-2022-1011 | 7.8 | Mar 18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write() Affected: All versions, or not specified |
| CVE-2022-0516 | 7.8 | Mar 10 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel Affected: All versions, or not specified |
| CVE-2022-26490 | 7.8 | Mar 6 | st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters Affected: All versions, or not specified |
| CVE-2022-0646 | 7.8 | Feb 18 | A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way user triggers cancel_work_sync after the unregister_netdev… Affected: All versions, or not specified |
| CVE-2022-25265 | 7.8 | Feb 16 | In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20) Affected: All versions, or not specified |
| CVE-2021-3760 | 7.8 | Feb 16 | A flaw was found in the Linux kernel Affected: All versions, or not specified |
| CVE-2022-24958 | 7.8 | Feb 11 | drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release Affected: All versions, or not specified |
| CVE-2022-24122 | 7.8 | Jan 29 | kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object… Affected: All versions, or not specified |
| CVE-2021-34866 | 7.8 | Jan 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3 Affected: All versions, or not specified |
| CVE-2022-23222 | 7.8 | Jan 14 | kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer… Affected: All versions, or not specified |
| CVE-2021-45469 | 7.8 | Dec 23 | In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry Affected: All versions, or not specified |
| CVE-2018-25020 | 7.8 | Dec 8 | The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into… Affected: All versions, or not specified |
| CVE-2021-43057 | 7.8 | Oct 28 | An issue was discovered in the Linux kernel before 5.14.8 Affected: All versions, or not specified |
| CVE-2021-42252 | 7.8 | Oct 11 | An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6 Affected: All versions, or not specified |
| CVE-2021-42008 | 7.8 | Oct 5 | The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write Affected: All versions, or not specified |
| CVE-2021-41864 | 7.8 | Oct 2 | prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a… Affected: All versions, or not specified |
| CVE-2021-38300 | 7.8 | Sep 20 | arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code… Affected: All versions, or not specified |
| CVE-2021-41073 | 7.8 | Sep 19 | loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel… Affected: All versions, or not specified |
| CVE-2021-3612 | 7.8 | Jul 9 | An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP Affected: All versions, or not specified |
| CVE-2021-28691 | 7.8 | Jun 29 | Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel… Affected: All versions, or not specified |
| CVE-2020-36387 | 7.8 | Jun 7 | An issue was discovered in the Linux kernel before 5.8.2 Affected: All versions, or not specified |
| CVE-2019-25045 | 7.8 | Jun 7 | An issue was discovered in the Linux kernel before 5.0.19 Affected: All versions, or not specified |
