https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-26989.htmlhttps://patchthecve.com/cve/CVE-2021-26989.htmlWed, 17 Jun 2026 03:44:06 +0000MEDIUM 6.5: Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access.https://patchthecve.com/cve/CVE-2021-26988.htmlhttps://patchthecve.com/cve/CVE-2021-26988.htmlWed, 17 Jun 2026 03:44:06 +0000LOW 3.5: Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, direhttps://patchthecve.com/cve/CVE-2020-13817.htmlhttps://patchthecve.com/cve/CVE-2020-13817.htmlWed, 17 Jun 2026 02:53:42 +0000HIGH 7.4: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attachttps://patchthecve.com/cve/CVE-2020-11868.htmlhttps://patchthecve.com/cve/CVE-2020-11868.htmlWed, 17 Jun 2026 02:50:56 +0000HIGH 7.5: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.https://patchthecve.com/cve/CVE-2019-5502.htmlhttps://patchthecve.com/cve/CVE-2019-5502.htmlWed, 17 Jun 2026 02:37:48 +0000CRITICAL 9.1: SMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when exploited could lead to information disclosure or addition or modification of data.https://patchthecve.com/cve/CVE-2019-5501.htmlhttps://patchthecve.com/cve/CVE-2019-5501.htmlWed, 17 Jun 2026 02:37:48 +0000HIGH 7.5: Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers.https://patchthecve.com/cve/CVE-2019-5493.htmlhttps://patchthecve.com/cve/CVE-2019-5493.htmlWed, 17 Jun 2026 02:37:47 +0000HIGH 7.5: Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticated attacker. A successful attack requires that multiple non-default options be enabled.https://patchthecve.com/cve/CVE-2019-8936.htmlhttps://patchthecve.com/cve/CVE-2019-8936.htmlWed, 17 Jun 2026 02:42:48 +0000HIGH 7.5: NTP through 4.2.8p12 has a NULL Pointer Dereference.https://patchthecve.com/cve/CVE-2018-5496.htmlhttps://patchthecve.com/cve/CVE-2018-5496.htmlWed, 17 Jun 2026 02:00:24 +0000MEDIUM 4.4: Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user.https://patchthecve.com/cve/CVE-2018-18607.htmlhttps://patchthecve.com/cve/CVE-2018-18607.htmlWed, 17 Jun 2026 01:47:35 +0000MEDIUM 5.5: An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF ahttps://patchthecve.com/cve/CVE-2018-18606.htmlhttps://patchthecve.com/cve/CVE-2018-18606.htmlWed, 17 Jun 2026 01:47:34 +0000MEDIUM 5.5: An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted Ehttps://patchthecve.com/cve/CVE-2018-18605.htmlhttps://patchthecve.com/cve/CVE-2018-18605.htmlWed, 17 Jun 2026 01:47:34 +0000MEDIUM 5.5: A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A speciahttps://patchthecve.com/cve/CVE-2018-18066.htmlhttps://patchthecve.com/cve/CVE-2018-18066.htmlWed, 17 Jun 2026 01:46:43 +0000HIGH 7.5: snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.https://patchthecve.com/cve/CVE-2016-10708.htmlhttps://patchthecve.com/cve/CVE-2016-10708.htmlWed, 17 Jun 2026 00:40:12 +0000HIGH 7.5: sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.https://patchthecve.com/cve/CVE-2016-1895.htmlhttps://patchthecve.com/cve/CVE-2016-1895.htmlWed, 17 Jun 2026 00:42:48 +0000MEDIUM 6.5: NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling.https://patchthecve.com/cve/CVE-2015-7746.htmlhttps://patchthecve.com/cve/CVE-2015-7746.htmlWed, 17 Jun 2026 00:33:03 +0000CRITICAL 9.8: NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.https://patchthecve.com/cve/CVE-2017-12859.htmlhttps://patchthecve.com/cve/CVE-2017-12859.htmlWed, 17 Jun 2026 01:04:02 +0000MEDIUM 5.9: NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors.https://patchthecve.com/cve/CVE-2015-7854.htmlhttps://patchthecve.com/cve/CVE-2015-7854.htmlWed, 17 Jun 2026 00:33:16 +0000HIGH 8.8: Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.https://patchthecve.com/cve/CVE-2015-7853.htmlhttps://patchthecve.com/cve/CVE-2015-7853.htmlWed, 17 Jun 2026 00:33:15 +0000CRITICAL 9.8: The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.https://patchthecve.com/cve/CVE-2015-7849.htmlhttps://patchthecve.com/cve/CVE-2015-7849.htmlWed, 17 Jun 2026 00:33:15 +0000HIGH 8.8: Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.https://patchthecve.com/cve/CVE-2015-7705.htmlhttps://patchthecve.com/cve/CVE-2015-7705.htmlWed, 17 Jun 2026 00:33:00 +0000CRITICAL 9.8: The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.https://patchthecve.com/cve/CVE-2015-7704.htmlhttps://patchthecve.com/cve/CVE-2015-7704.htmlWed, 17 Jun 2026 00:32:59 +0000HIGH 7.5: The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.https://patchthecve.com/cve/CVE-2016-3400.htmlhttps://patchthecve.com/cve/CVE-2016-3400.htmlWed, 17 Jun 2026 00:45:36 +0000HIGH 7.5: NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol.https://patchthecve.com/cve/CVE-2016-5374.htmlhttps://patchthecve.com/cve/CVE-2016-5374.htmlWed, 17 Jun 2026 00:49:18 +0000HIGH 8.8: NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the owner_rights ACL entry.https://patchthecve.com/cve/CVE-2016-6495.htmlhttps://patchthecve.com/cve/CVE-2016-6495.htmlWed, 17 Jun 2026 00:51:16 +0000MEDIUM 5.9: NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access.https://patchthecve.com/cve/CVE-2015-8322.htmlhttps://patchthecve.com/cve/CVE-2015-8322.htmlWed, 17 Jun 2026 00:34:19 +0000HIGH 8.8: NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors.https://patchthecve.com/cve/CVE-2016-2518.htmlhttps://patchthecve.com/cve/CVE-2016-2518.htmlWed, 17 Jun 2026 00:44:12 +0000MEDIUM 5.3: The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.https://patchthecve.com/cve/CVE-2015-7886.htmlhttps://patchthecve.com/cve/CVE-2015-7886.htmlWed, 17 Jun 2026 00:33:19 +0000LOW 3.7: NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors.https://patchthecve.com/cve/CVE-2008-3349.htmlhttps://patchthecve.com/cve/CVE-2008-3349.htmlTue, 16 Jun 2026 22:55:39 +0000HIGH 10.0: Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. https://patchthecve.com/cve/CVE-2008-3160.htmlhttps://patchthecve.com/cve/CVE-2008-3160.htmlTue, 16 Jun 2026 22:55:16 +0000HIGH 10.0: Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors.https://patchthecve.com/cve/CVE-2004-2539.htmlhttps://patchthecve.com/cve/CVE-2004-2539.htmlTue, 16 Jun 2026 22:09:50 +0000HIGH 7.8: Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service (panic and reboot) and possibly other impacts via unknown attack vectors, possibly related to unspecified worms, as identified by bug ID