Home / Security / CVE index / 2022
2022 NetApp CVEs (page 2)
Showing 300 CVEs with a 2022 identifier — page 2 of 3. Sorted by CVE id.
Always verify. NetApp's advisory is authoritative for affected versions and fixes; NVD carries the CVSS record.
Showing 300 of 300
| CVE | Published | Severity | CVSS | Summary / Sources |
|---|---|---|---|---|
CVE-2022-22825 | 2022-01-10 | HIGH | 8.8 | lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. NVD ↗ · NTAP-20220131-0004 |
CVE-2022-22826 | 2022-01-10 | HIGH | 8.8 | nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. NVD ↗ · NTAP-20220131-0004 |
CVE-2022-22827 | 2022-01-10 | HIGH | 8.8 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. NVD ↗ · NTAP-20220131-0004 |
CVE-2022-22844 | 2022-01-10 | MEDIUM | 5.5 | LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. NVD ↗ · NTAP-20220311-0002 |
CVE-2022-22846 | — | — | — | NVD ↗ · NTAP-20220131-0005 |
CVE-2022-22950 | 2022-04-01 | MEDIUM | 6.5 | n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cau NVD ↗ · NTAP-20220401-0001 |
CVE-2022-22965 | — | — | — | NVD ↗ · NTAP-20220331-0011 |
CVE-2022-22968 | 2022-04-14 | MEDIUM | 5.3 | In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitiv NVD ↗ · NTAP-20220602-0004 |
CVE-2022-22970 | — | — | — | NVD ↗ · NTAP-20220616-0006 |
CVE-2022-22971 | — | — | — | NVD ↗ · NTAP-20220616-0003 |
CVE-2022-22976 | — | — | — | NVD ↗ · NTAP-20220707-0003 |
CVE-2022-22978 | — | — | — | NVD ↗ · NTAP-20220707-0003 |
CVE-2022-23084 | — | — | — | NVD ↗ · NTAP-20240419-0003 |
CVE-2022-23085 | — | — | — | NVD ↗ · NTAP-20240322-0004 |
CVE-2022-23086 | — | — | — | NVD ↗ · NTAP-20240419-0002 |
CVE-2022-23087 | — | — | — | NVD ↗ · NTAP-20240415-0005 |
CVE-2022-23089 | — | — | — | NVD ↗ · NTAP-20240415-0006 |
CVE-2022-2309 | — | — | — | NVD ↗ · NTAP-20220915-0006 |
CVE-2022-23090 | — | — | — | NVD ↗ · NTAP-20240415-0007 |
CVE-2022-23091 | — | — | — | NVD ↗ · NTAP-20240415-0008 |
CVE-2022-23092 | — | — | — | NVD ↗ · NTAP-20240415-0009 |
CVE-2022-23093 | 2024-02-15 | MEDIUM | 6.5 | ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a response ping has to reconstruct the IP heade NVD ↗ · NTAP-20221209-0009 |
CVE-2022-2318 | — | — | — | NVD ↗ · NTAP-20230120-0001 |
CVE-2022-23181 | — | — | — | NVD ↗ · NTAP-20220217-0010 |
CVE-2022-2319 | — | — | — | NVD ↗ · NTAP-20221104-0003 |
CVE-2022-2320 | — | — | — | NVD ↗ · NTAP-20221104-0003 |
CVE-2022-23218 | — | — | — | NVD ↗ · NTAP-20220131-0003 |
CVE-2022-23219 | — | — | — | NVD ↗ · NTAP-20220131-0003 |
CVE-2022-23221 | — | — | — | NVD ↗ · NTAP-20230818-0011 |
CVE-2022-23222 | — | — | — | NVD ↗ · NTAP-20220217-0002 |
CVE-2022-23232 | — | — | — | NVD ↗ · NTAP-20220303-0009 |
CVE-2022-23233 | — | — | — | NVD ↗ · NTAP-20220303-0010 |
CVE-2022-23234 | — | — | — | NVD ↗ · NTAP-20220228-0001 |
CVE-2022-23235 | — | — | — | NVD ↗ · NTAP-20220324-0001 |
CVE-2022-23236 | — | — | — | NVD ↗ · NTAP-20220527-0001 |
CVE-2022-23237 | — | — | — | NVD ↗ · NTAP-20220527-0002 |
CVE-2022-23238 | — | — | — | NVD ↗ · NTAP-20220808-0001 |
CVE-2022-23239 | — | — | — | NVD ↗ · NTAP-20220901-0001 |
CVE-2022-23240 | — | — | — | NVD ↗ · NTAP-20220901-0002 |
CVE-2022-23241 | 2022-10-19 | HIGH | 8.1 | Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated NVD ↗ · NTAP-20221017-0001 |
CVE-2022-2327 | — | — | — | NVD ↗ · NTAP-20230203-0009 |
CVE-2022-23302 | — | — | — | NVD ↗ · NTAP-20220217-0006 |
CVE-2022-23305 | — | — | — | NVD ↗ · NTAP-20220217-0007 |
CVE-2022-23307 | — | — | — | NVD ↗ · NTAP-20220204-0004 |
CVE-2022-23308 | 2022-02-26 | HIGH | 7.5 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. NVD ↗ · NTAP-20220331-0008 |
CVE-2022-23395 | — | — | — | NVD ↗ · NTAP-20220325-0008 |
CVE-2022-23437 | — | — | — | NVD ↗ · NTAP-20221028-0005 |
CVE-2022-23457 | — | — | — | NVD ↗ · NTAP-20230127-0014 |
CVE-2022-23491 | — | — | — | NVD ↗ · NTAP-20230223-0010 |
CVE-2022-23498 | — | — | — | NVD ↗ · NTAP-20230309-0007 |
CVE-2022-23529 | — | — | — | NVD ↗ · NTAP-20230120-0009 |
CVE-2022-23539 | — | — | — | NVD ↗ · NTAP-20240621-0007 · NTAP-20230120-0009 |
CVE-2022-23540 | — | — | — | NVD ↗ · NTAP-20240621-0007 · NTAP-20230120-0009 |
CVE-2022-23541 | — | — | — | NVD ↗ · NTAP-20240621-0007 · NTAP-20230120-0009 |
CVE-2022-23552 | — | — | — | NVD ↗ · NTAP-20230302-0008 |
CVE-2022-23633 | — | — | — | NVD ↗ · NTAP-20240119-0013 |
CVE-2022-23708 | — | — | — | NVD ↗ · NTAP-20220729-0003 |
CVE-2022-23710 | — | — | — | NVD ↗ · NTAP-20220325-0009 |
CVE-2022-23712 | — | — | — | NVD ↗ · NTAP-20220707-0010 |
CVE-2022-23772 | — | — | — | NVD ↗ · NTAP-20220225-0006 |
CVE-2022-23773 | — | — | — | NVD ↗ · NTAP-20220225-0006 |
CVE-2022-23806 | — | — | — | NVD ↗ · NTAP-20220225-0006 |
CVE-2022-23812 | — | — | — | NVD ↗ · NTAP-20220407-0005 |
CVE-2022-23833 | — | — | — | NVD ↗ · NTAP-20220221-0003 |
CVE-2022-23852 | 2022-01-24 | CRITICAL | 9.8 | Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES. NVD ↗ · NTAP-20220217-0001 |
CVE-2022-23913 | — | — | — | NVD ↗ · NTAP-20220303-0003 |
CVE-2022-23943 | — | — | — | NVD ↗ · NTAP-20220321-0001 |
CVE-2022-23990 | 2022-01-26 | HIGH | 7.5 | Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. NVD ↗ · NTAP-20220204-0006 |
CVE-2022-24030 | — | — | — | NVD ↗ · NTAP-20220216-0011 |
CVE-2022-24031 | — | — | — | NVD ↗ · NTAP-20220216-0009 |
CVE-2022-24048 | — | — | — | NVD ↗ · NTAP-20220318-0004 |
CVE-2022-24050 | — | — | — | NVD ↗ · NTAP-20220318-0004 |
CVE-2022-24051 | — | — | — | NVD ↗ · NTAP-20220318-0004 |
CVE-2022-24052 | — | — | — | NVD ↗ · NTAP-20220318-0004 |
CVE-2022-24069 | — | — | — | NVD ↗ · NTAP-20220216-0002 |
CVE-2022-24122 | — | — | — | NVD ↗ · NTAP-20220221-0001 |
CVE-2022-24407 | 2022-02-24 | HIGH | 8.8 | In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. NVD ↗ · NTAP-20221007-0003 |
CVE-2022-24436 | — | — | — | NVD ↗ · NTAP-20220624-0007 |
CVE-2022-24675 | — | — | — | NVD ↗ · NTAP-20220915-0010 |
CVE-2022-24683 | — | — | — | NVD ↗ · NTAP-20220318-0008 |
CVE-2022-24684 | — | — | — | NVD ↗ · NTAP-20220318-0008 |
CVE-2022-24685 | — | — | — | NVD ↗ · NTAP-20220331-0007 |
CVE-2022-24686 | — | — | — | NVD ↗ · NTAP-20220318-0008 |
CVE-2022-24687 | — | — | — | NVD ↗ · NTAP-20220331-0006 |
CVE-2022-24735 | — | — | — | NVD ↗ · NTAP-20220715-0003 |
CVE-2022-24736 | — | — | — | NVD ↗ · NTAP-20220715-0003 |
CVE-2022-24785 | — | — | — | NVD ↗ · NTAP-20241108-0002 · NTAP-20220513-0006 |
CVE-2022-24801 | — | — | — | NVD ↗ · NTAP-20251017-0009 |
CVE-2022-24812 | — | — | — | NVD ↗ · NTAP-20220519-0005 |
CVE-2022-24823 | — | — | — | NVD ↗ · NTAP-20220616-0004 |
CVE-2022-24834 | — | — | — | NVD ↗ · NTAP-20230814-0006 |
CVE-2022-24857 | — | — | — | NVD ↗ · NTAP-20220609-0003 |
CVE-2022-24891 | — | — | — | NVD ↗ · NTAP-20230127-0014 |
CVE-2022-24903 | — | — | — | NVD ↗ · NTAP-20221111-0002 |
CVE-2022-24921 | — | — | — | NVD ↗ · NTAP-20220325-0010 |
CVE-2022-24958 | — | — | — | NVD ↗ · NTAP-20220225-0008 |
CVE-2022-24963 | 2023-01-31 | CRITICAL | 9.8 | Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. Thi NVD ↗ · NTAP-20230908-0008 |
CVE-2022-24999 | — | — | — | NVD ↗ · NTAP-20230908-0005 |
CVE-2022-2503 | — | — | — | NVD ↗ · NTAP-20230214-0005 |
CVE-2022-25139 | — | — | — | NVD ↗ · NTAP-20220303-0007 |
CVE-2022-25147 | 2023-01-31 | MEDIUM | 6.5 | Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of NVD ↗ · NTAP-20240315-0001 |
CVE-2022-25168 | — | — | — | NVD ↗ · NTAP-20220915-0007 |
CVE-2022-25169 | — | — | — | NVD ↗ · NTAP-20220804-0004 |
CVE-2022-25235 | 2022-02-16 | CRITICAL | 9.8 | xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain cont NVD ↗ · NTAP-20220303-0008 |
CVE-2022-25236 | 2022-02-16 | CRITICAL | 9.8 | xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. NVD ↗ · NTAP-20220303-0008 |
CVE-2022-25258 | — | — | — | NVD ↗ · NTAP-20221028-0007 |
CVE-2022-2526 | — | — | — | NVD ↗ · NTAP-20221111-0005 |
CVE-2022-25265 | — | — | — | NVD ↗ · NTAP-20220318-0005 |
CVE-2022-25313 | 2022-02-18 | MEDIUM | 6.5 | In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. NVD ↗ · NTAP-20220303-0008 |
CVE-2022-25314 | 2022-02-18 | HIGH | 7.5 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. NVD ↗ · NTAP-20220303-0008 |
CVE-2022-25315 | 2022-02-18 | CRITICAL | 9.8 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. NVD ↗ · NTAP-20220303-0008 |
CVE-2022-25365 | — | — | — | NVD ↗ · NTAP-20220331-0001 |
CVE-2022-25636 | — | — | — | NVD ↗ · NTAP-20220325-0002 |
CVE-2022-25647 | — | — | — | NVD ↗ · NTAP-20220901-0009 |
CVE-2022-25762 | — | — | — | NVD ↗ · NTAP-20220629-0003 |
CVE-2022-25844 | 2022-05-01 | MEDIUM | 5.3 | The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assig NVD ↗ · NTAP-20220629-0009 |
CVE-2022-25857 | — | — | — | NVD ↗ · NTAP-20240315-0010 |
CVE-2022-25881 | — | — | — | NVD ↗ · NTAP-20230622-0008 |
CVE-2022-25883 | — | — | — | NVD ↗ · NTAP-20241025-0004 |
CVE-2022-2590 | — | — | — | NVD ↗ · NTAP-20230214-0004 |
CVE-2022-26006 | — | — | — | NVD ↗ · NTAP-20221111-0006 |
CVE-2022-2601 | — | — | — | NVD ↗ · NTAP-20230203-0004 |
CVE-2022-26074 | — | — | — | NVD ↗ · NTAP-20220930-0003 |
CVE-2022-26148 | — | — | — | NVD ↗ · NTAP-20220425-0005 |
CVE-2022-2625 | — | — | — | NVD ↗ · NTAP-20251114-0014 |
CVE-2022-26336 | — | — | — | NVD ↗ · NTAP-20221028-0006 |
CVE-2022-26343 | — | — | — | NVD ↗ · NTAP-20230302-0011 |
CVE-2022-26353 | — | — | — | NVD ↗ · NTAP-20220425-0003 |
CVE-2022-26354 | — | — | — | NVD ↗ · NTAP-20220425-0003 |
CVE-2022-26373 | — | — | — | NVD ↗ · NTAP-20221007-0005 |
CVE-2022-26377 | 2022-06-09 | HIGH | 7.5 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle reque NVD ↗ · NTAP-20220624-0005 |
CVE-2022-26477 | — | — | — | NVD ↗ · NTAP-20220812-0003 |
CVE-2022-26488 | 2022-03-10 | HIGH | 7.0 | In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to NVD ↗ · NTAP-20220419-0005 |
CVE-2022-26490 | — | — | — | NVD ↗ · NTAP-20220429-0004 |
CVE-2022-26612 | — | — | — | NVD ↗ · NTAP-20220519-0004 |
CVE-2022-26837 | — | — | — | NVD ↗ · NTAP-20230302-0011 |
CVE-2022-26872 | — | — | — | NVD ↗ · NTAP-20230731-0008 |
CVE-2022-26966 | — | — | — | NVD ↗ · NTAP-20220419-0001 |
CVE-2022-27007 | — | — | — | NVD ↗ · NTAP-20220519-0008 |
CVE-2022-27008 | — | — | — | NVD ↗ · NTAP-20220519-0008 |
CVE-2022-27191 | — | — | — | NVD ↗ · NTAP-20220429-0002 |
CVE-2022-27223 | — | — | — | NVD ↗ · NTAP-20220419-0001 |
CVE-2022-27376 | — | — | — | NVD ↗ · NTAP-20220519-0007 |
CVE-2022-27377 | — | — | — | NVD ↗ · NTAP-20220526-0007 |
CVE-2022-27378 | — | — | — | NVD ↗ · NTAP-20220526-0004 |
CVE-2022-27379 | — | — | — | NVD ↗ · NTAP-20220526-0005 |
CVE-2022-27380 | — | — | — | NVD ↗ · NTAP-20220526-0007 |
CVE-2022-27381 | — | — | — | NVD ↗ · NTAP-20220519-0006 |
CVE-2022-27382 | — | — | — | NVD ↗ · NTAP-20220526-0004 |
CVE-2022-27383 | — | — | — | NVD ↗ · NTAP-20220519-0006 |
CVE-2022-27384 | — | — | — | NVD ↗ · NTAP-20220519-0006 |
CVE-2022-27385 | — | — | — | NVD ↗ · NTAP-20220526-0008 |
CVE-2022-27386 | — | — | — | NVD ↗ · NTAP-20220526-0004 |
CVE-2022-27387 | — | — | — | NVD ↗ · NTAP-20220526-0004 |
CVE-2022-27444 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27445 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27446 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27447 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27448 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27449 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27451 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27452 | — | — | — | NVD ↗ · NTAP-20220526-0006 |
CVE-2022-27455 | — | — | — | NVD ↗ · NTAP-20220526-0007 |
CVE-2022-27456 | — | — | — | NVD ↗ · NTAP-20220526-0007 |
CVE-2022-27457 | — | — | — | NVD ↗ · NTAP-20220526-0007 |
CVE-2022-27458 | — | — | — | NVD ↗ · NTAP-20220526-0007 |
CVE-2022-27536 | — | — | — | NVD ↗ · NTAP-20230309-0001 |
CVE-2022-2764 | — | — | — | NVD ↗ · NTAP-20221014-0006 |
CVE-2022-27664 | — | — | — | NVD ↗ · NTAP-20220923-0004 |
CVE-2022-27666 | — | — | — | NVD ↗ · NTAP-20220429-0001 |
CVE-2022-27774 | 2022-06-02 | MEDIUM | 5.7 | An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credent NVD ↗ · NTAP-20220609-0008 |
CVE-2022-27775 | 2022-06-02 | HIGH | 7.5 | An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a NVD ↗ · NTAP-20220609-0008 |
CVE-2022-27776 | 2022-06-02 | MEDIUM | 6.5 | A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host NVD ↗ · NTAP-20220609-0008 |
CVE-2022-27778 | 2022-06-02 | HIGH | 8.1 | A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`. NVD ↗ · NTAP-20220729-0004 · NTAP-20220609-0009 |
CVE-2022-27779 | 2022-06-02 | MEDIUM | 5.3 | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cooki NVD ↗ · NTAP-20220609-0009 |
CVE-2022-27780 | 2022-06-02 | HIGH | 7.5 | The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong NVD ↗ · NTAP-20220609-0009 |
CVE-2022-27781 | 2022-06-02 | HIGH | 7.5 | libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous fun NVD ↗ · NTAP-20220609-0009 |
CVE-2022-27782 | 2022-06-02 | HIGH | 7.5 | libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previo NVD ↗ · NTAP-20220609-0009 |
CVE-2022-27879 | — | — | — | NVD ↗ · NTAP-20230824-0001 |
CVE-2022-27881 | — | — | — | NVD ↗ · NTAP-20220506-0005 |
CVE-2022-27882 | — | — | — | NVD ↗ · NTAP-20220506-0005 |
CVE-2022-2795 | — | — | — | NVD ↗ · NTAP-20241129-0002 |
CVE-2022-28049 | — | — | — | NVD ↗ · NTAP-20220519-0008 |
CVE-2022-28131 | — | — | — | NVD ↗ · NTAP-20221111-0009 |
CVE-2022-28166 | — | — | — | NVD ↗ · NTAP-20220627-0001 |
CVE-2022-28167 | — | — | — | NVD ↗ · NTAP-20220627-0002 |
CVE-2022-28168 | — | — | — | NVD ↗ · NTAP-20220627-0003 |
CVE-2022-28169 | — | — | — | NVD ↗ · NTAP-20230127-0001 |
CVE-2022-28170 | — | — | — | NVD ↗ · NTAP-20230127-0002 |
CVE-2022-2827 | — | — | — | NVD ↗ · NTAP-20221215-0007 |
CVE-2022-28327 | — | — | — | NVD ↗ · NTAP-20220915-0010 |
CVE-2022-28330 | 2022-06-09 | MEDIUM | 5.3 | Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module. NVD ↗ · NTAP-20220624-0005 |
CVE-2022-28346 | — | — | — | NVD ↗ · NTAP-20220609-0002 |
CVE-2022-28356 | — | — | — | NVD ↗ · NTAP-20220506-0006 |
CVE-2022-28388 | — | — | — | NVD ↗ · NTAP-20220513-0001 |
CVE-2022-28389 | — | — | — | NVD ↗ · NTAP-20220513-0001 |
CVE-2022-28390 | — | — | — | NVD ↗ · NTAP-20220513-0001 |
CVE-2022-28614 | 2022-06-09 | MEDIUM | 5.3 | The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input usi NVD ↗ · NTAP-20220624-0005 |
CVE-2022-28615 | 2022-06-09 | CRITICAL | 9.1 | Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large i NVD ↗ · NTAP-20220624-0005 |
CVE-2022-28660 | — | — | — | NVD ↗ · NTAP-20220707-0004 |
CVE-2022-28693 | — | — | — | NVD ↗ · NTAP-20221007-0006 |
CVE-2022-28697 | — | — | — | NVD ↗ · NTAP-20221014-0004 |
CVE-2022-2873 | — | — | — | NVD ↗ · NTAP-20230120-0001 |
CVE-2022-28733 | — | — | — | NVD ↗ · NTAP-20230825-0002 |
CVE-2022-28734 | — | — | — | NVD ↗ · NTAP-20230825-0002 |
CVE-2022-28735 | — | — | — | NVD ↗ · NTAP-20230825-0002 |
CVE-2022-28736 | — | — | — | NVD ↗ · NTAP-20230825-0002 |
CVE-2022-28738 | — | — | — | NVD ↗ · NTAP-20220624-0002 |
CVE-2022-28739 | — | — | — | NVD ↗ · NTAP-20220624-0002 |
CVE-2022-2879 | — | — | — | NVD ↗ · NTAP-20230120-0006 |
CVE-2022-28796 | — | — | — | NVD ↗ · NTAP-20220506-0006 |
CVE-2022-2880 | — | — | — | NVD ↗ · NTAP-20230120-0006 |
CVE-2022-28893 | — | — | — | NVD ↗ · NTAP-20220526-0002 |
CVE-2022-28948 | — | — | — | NVD ↗ · NTAP-20220923-0006 |
CVE-2022-29078 | — | — | — | NVD ↗ · NTAP-20220804-0001 |
CVE-2022-29153 | — | — | — | NVD ↗ · NTAP-20220602-0005 |
CVE-2022-29155 | — | — | — | NVD ↗ · NTAP-20220609-0007 |
CVE-2022-29156 | — | — | — | NVD ↗ · NTAP-20220602-0002 |
CVE-2022-29170 | — | — | — | NVD ↗ · NTAP-20220707-0005 |
CVE-2022-29176 | — | — | — | NVD ↗ · NTAP-20220616-0002 |
CVE-2022-29217 | — | — | — | NVD ↗ · NTAP-20251017-0005 |
CVE-2022-29218 | — | — | — | NVD ↗ · NTAP-20220629-0010 |
CVE-2022-29244 | — | — | — | NVD ↗ · NTAP-20220722-0007 |
CVE-2022-2938 | — | — | — | NVD ↗ · NTAP-20221223-0002 |
CVE-2022-29404 | 2022-06-09 | HIGH | 7.5 | In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on NVD ↗ · NTAP-20220624-0005 |
CVE-2022-29526 | — | — | — | NVD ↗ · NTAP-20220729-0001 |
CVE-2022-2953 | 2022-08-29 | MEDIUM | 5.5 | LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file NVD ↗ · NTAP-20221014-0008 |
CVE-2022-29581 | — | — | — | NVD ↗ · NTAP-20220629-0005 |
CVE-2022-29582 | — | — | — | NVD ↗ · NTAP-20220812-0006 |
CVE-2022-2959 | — | — | — | NVD ↗ · NTAP-20230214-0005 |
CVE-2022-2961 | — | — | — | NVD ↗ · NTAP-20230214-0004 |
CVE-2022-2964 | — | — | — | NVD ↗ · NTAP-20230113-0001 |
CVE-2022-2977 | — | — | — | NVD ↗ · NTAP-20230214-0006 |
CVE-2022-29799 | — | — | — | NVD ↗ · NTAP-20220602-0008 |
CVE-2022-29800 | — | — | — | NVD ↗ · NTAP-20220602-0008 |
CVE-2022-29824 | 2022-05-03 | MEDIUM | 6.5 | In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out NVD ↗ · NTAP-20220715-0006 |
CVE-2022-29871 | — | — | — | NVD ↗ · NTAP-20230824-0002 |
CVE-2022-29885 | — | — | — | NVD ↗ · NTAP-20220629-0002 |
CVE-2022-29901 | 2022-07-12 | MEDIUM | 5.6 | Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary NVD ↗ · NTAP-20221007-0007 |
CVE-2022-29968 | — | — | — | NVD ↗ · NTAP-20220715-0009 |
CVE-2022-30115 | 2022-06-02 | MEDIUM | 4.3 | Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This NVD ↗ · NTAP-20220609-0009 |
CVE-2022-30122 | — | — | — | NVD ↗ · NTAP-20231208-0012 |
CVE-2022-30123 | — | — | — | NVD ↗ · NTAP-20231208-0011 |
CVE-2022-30126 | — | — | — | NVD ↗ · NTAP-20220624-0004 |
CVE-2022-3028 | — | — | — | NVD ↗ · NTAP-20230214-0004 |
CVE-2022-30522 | 2022-06-09 | HIGH | 7.5 | If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessi NVD ↗ · NTAP-20220624-0005 |
CVE-2022-30539 | — | — | — | NVD ↗ · NTAP-20230302-0011 |
CVE-2022-30556 | 2022-06-09 | HIGH | 7.5 | Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer. NVD ↗ · NTAP-20220624-0005 |
CVE-2022-30594 | — | — | — | NVD ↗ · NTAP-20220707-0001 |
CVE-2022-30601 | — | — | — | NVD ↗ · NTAP-20221014-0004 |
CVE-2022-30614 | — | — | — | NVD ↗ · NTAP-20221014-0005 |
CVE-2022-30629 | — | — | — | NVD ↗ · NTAP-20220915-0004 |
CVE-2022-30634 | — | — | — | NVD ↗ · NTAP-20220915-0004 |
CVE-2022-30689 | — | — | — | NVD ↗ · NTAP-20220629-0006 |
CVE-2022-30704 | — | — | — | NVD ↗ · NTAP-20230302-0011 |
CVE-2022-3080 | 2022-09-21 | HIGH | 7.5 | By sending specific queries to the resolver, an attacker can cause named to crash. NVD ↗ · NTAP-20240621-0002 |
CVE-2022-3094 | — | — | — | NVD ↗ · NTAP-20230223-0009 |
CVE-2022-30944 | — | — | — | NVD ↗ · NTAP-20221014-0004 |
CVE-2022-30973 | — | — | — | NVD ↗ · NTAP-20220722-0004 |
CVE-2022-31097 | — | — | — | NVD ↗ · NTAP-20220901-0010 |
CVE-2022-31107 | — | — | — | NVD ↗ · NTAP-20220901-0010 |
CVE-2022-31123 | — | — | — | NVD ↗ · NTAP-20221124-0002 |
CVE-2022-31129 | — | — | — | NVD ↗ · NTAP-20241108-0002 · NTAP-20221014-0003 |
CVE-2022-31144 | — | — | — | NVD ↗ · NTAP-20220909-0002 |
CVE-2022-31150 | — | — | — | NVD ↗ · NTAP-20220915-0002 |
CVE-2022-31151 | — | — | — | NVD ↗ · NTAP-20220909-0006 |
CVE-2022-3116 | — | — | — | NVD ↗ · NTAP-20230505-0010 |
CVE-2022-31160 | — | — | — | NVD ↗ · NTAP-20220909-0007 |
CVE-2022-31176 | — | — | — | NVD ↗ · NTAP-20221209-0004 |
CVE-2022-3162 | — | — | — | NVD ↗ · NTAP-20230511-0004 |
CVE-2022-31621 | — | — | — | NVD ↗ · NTAP-20220707-0006 |
CVE-2022-31622 | — | — | — | NVD ↗ · NTAP-20220707-0006 |
CVE-2022-31623 | — | — | — | NVD ↗ · NTAP-20220707-0006 |
CVE-2022-31624 | — | — | — | NVD ↗ · NTAP-20220707-0006 |
CVE-2022-31625 | — | — | — | NVD ↗ · NTAP-20220722-0005 |
CVE-2022-31626 | — | — | — | NVD ↗ · NTAP-20220722-0005 |
CVE-2022-31627 | — | — | — | NVD ↗ · NTAP-20220826-0008 |
CVE-2022-31628 | — | — | — | NVD ↗ · NTAP-20221209-0001 |
CVE-2022-31629 | — | — | — | NVD ↗ · NTAP-20221209-0001 |
CVE-2022-31630 | — | — | — | NVD ↗ · NTAP-20221223-0008 |
CVE-2022-31631 | — | — | — | NVD ↗ · NTAP-20230223-0007 |
CVE-2022-3165 | — | — | — | NVD ↗ · NTAP-20221223-0006 |
CVE-2022-31676 | 2022-08-23 | HIGH | 7.8 | VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Gues NVD ↗ · NTAP-20221017-0003 |
CVE-2022-31690 | — | — | — | NVD ↗ · NTAP-20221215-0010 |
CVE-2022-31692 | — | — | — | NVD ↗ · NTAP-20221215-0010 |
CVE-2022-31693 | — | — | — | NVD ↗ · NTAP-20230824-0009 |
CVE-2022-3172 | — | — | — | NVD ↗ · NTAP-20231221-0005 |
CVE-2022-3176 | — | — | — | NVD ↗ · NTAP-20230216-0003 |
CVE-2022-31813 | 2022-06-09 | CRITICAL | 9.8 | Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. T NVD ↗ · NTAP-20220624-0005 |
CVE-2022-3202 | — | — | — | NVD ↗ · NTAP-20221228-0007 |
CVE-2022-32081 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
CVE-2022-32082 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
CVE-2022-32083 | — | — | — | NVD ↗ · NTAP-20220826-0006 |
CVE-2022-32084 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
CVE-2022-32085 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
CVE-2022-32086 | — | — | — | NVD ↗ · NTAP-20220826-0007 |
CVE-2022-32087 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
CVE-2022-32088 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
CVE-2022-32089 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
CVE-2022-32091 | — | — | — | NVD ↗ · NTAP-20220818-0005 |
Years: 2026 · 2025 · 2024 · 2023 · 2022 · 2021 · 2020 · 2019 · 2018 · 2017 · 2016 · 2015 · 2014 · 2013 · 2012 · 2011 · 2010 · 2009 · 2008 · 2007 · 2006 · 2005 · 2004 · 2003 · 2002 · 1999