SP
Product
Service Processor
by Netapp · last CVE Jan 4, 2021
On CISA KEVExploited in the wild
13
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 4Low 0
Watch

Add Service Processor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2215
In wildKEV
7.8
72%
Oct 11
Android Kernel Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2019-13272
In wildKEV
7.8
52%
Jul 17
Linux Kernel Improper Privilege Management Vulnerability
Affected: All versions, or not specified
CVE-2019-5490
9.8
3%
Mar 21
Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized…
Affected: 2.8; 3.7; 4.5; 5.5; 2.8; 3.7; +34 more
CVE-2019-14816
7.8
1%
Sep 20
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of…
Affected: All versions, or not specified
CVE-2019-14814
7.8
1%
Sep 20
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial…
Affected: All versions, or not specified
CVE-2019-14835
7.8
1%
Sep 17
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer…
Affected: All versions, or not specified
CVE-2019-16995
7.5
4%
Sep 30
In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka…
Affected: All versions, or not specified
CVE-2016-10708
7.5
16%
Jan 21
sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated…
Affected: All versions, or not specified
CVE-2016-8610
7.5
40%
Nov 13
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection…
Affected: All versions, or not specified
CVE-2019-25013
5.9
4%
Jan 4
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read
Affected: All versions, or not specified
CVE-2019-1559
5.9
17%
Feb 27
0-byte record padding oracle
Affected: All versions, or not specified
CVE-2019-15902
5.6
1%
Sep 4
A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x…
Affected: All versions, or not specified
CVE-2018-15473
5.3
99%
Aug 17
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has…
Affected: All versions, or not specified
Showing 13