OT
Product
Ontap Tools
On CISA KEVExploited in the wildRansomware-linked
29
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 7Low 1
Watch
Add Ontap Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3156 In wildKEV | 7.8 | Jan 26 | Sudo Heap-Based Buffer Overflow Vulnerability Affected: 9 |
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: 9; 10 |
| CVE-2023-52433 | 7.8 | Feb 20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction… Affected: 9; 10 |
| CVE-2025-27820 | 7.5 | Apr 24 | A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification Affected: 10 |
| CVE-2024-38286 | 7.5 | Nov 7 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat Affected: 9; 10 |
| CVE-2024-49761 | 7.5 | Oct 28 | REXML is an XML toolkit for Ruby Affected: 10 |
| CVE-2024-7254 | 7.5 | Sep 19 | Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e Affected: 10 |
| CVE-2024-6119 | 7.5 | Sep 3 | Possible denial of service in X.509 name checks Affected: 9 |
| CVE-2024-39689 | 7.5 | Jul 5 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts Affected: 10 |
| CVE-2024-34750 | 7.5 | Jul 3 | Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat Affected: 9 |
| CVE-2024-28757 | 7.5 | Mar 10 | libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate) Affected: 10 |
| CVE-2023-2953 | 7.5 | May 30 | A vulnerability was found in openldap Affected: All versions, or not specified |
| CVE-2021-28165 | 7.5 | Apr 1 | In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame Affected: before 9.10 |
| CVE-2024-0565 | 7.4 | Jan 15 | An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel Affected: All versions, or not specified |
| CVE-2020-13817 | 7.4 | Jun 4 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for… Affected: All versions, or not specified |
| CVE-2023-38709 | 7.3 | Apr 4 | Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses Affected: 10 |
| CVE-2024-29131 | 7.3 | Mar 21 | Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1 Affected: 10 |
Showing 17
