[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQJ3jrAHB-zUK-4qola9C3_ZYmNZxgIE1FGQIO2LygAw":3,"g5a-family:netapp\u002Fsteelstore_cloud_integrated_storage":109,"g5a-ex:netapp\u002Fsteelstore_cloud_integrated_storage@*":110},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":77,"seoMetadata":87,"meta":106},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","steelstore_cloud_integrated_storage",0,211,2,"2020-10-21",[],"Steelstore Cloud Integrated Storage by Netapp is a technology product and 211 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,33,39,44,49,54,59,66,72],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2018-15473","OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.","2018-08-17",5.3,"v3.1","Medium",false,0.98631,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":4,"epssScore":32},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",7.8,"High",0.72105,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":38},"CVE-2020-1967","Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).","2020-04-21",7.5,0.53336,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":4,"epssScore":43},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":48},"CVE-2019-5436","A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.","2019-05-28",0.49739,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":37,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":53},"CVE-2016-9131","named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.","2017-01-12",0.40556,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":37,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":58},"CVE-2016-8864","named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.","2016-11-02",0.38733,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":22,"severity":64,"isKev":24,"epssScore":65},"CVE-2020-8840","FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect\u002FJNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.","2020-02-10",9.8,"Critical",0.26587,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":71},"CVE-2020-9402","Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possible to break escaping and inject malicious SQL.","2020-03-05",8.8,0.22513,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":63,"cvssVersion":22,"severity":64,"isKev":24,"epssScore":76},"CVE-2019-5482","Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","2019-09-16",0.17939,[78,83],{"cveId":40,"description":41,"publishedDate":42,"cvssScore":30,"severity":31,"isKev":4,"epssScore":43,"cisaVulnName":79,"cisaDateAdded":80,"cisaShortDescription":81,"cisaRequiredAction":82},"Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.","Apply updates per vendor instructions.",{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":84,"cisaDateAdded":85,"cisaShortDescription":86,"cisaRequiredAction":82},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"title":88,"metaDescription":89,"keywords":90,"structuredData":91},"Steelstore Cloud Integrated Storage by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Steelstore Cloud Integrated Storage by Netapp with 211 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Steelstore Cloud Integrated Storage vulnerabilities, Steelstore Cloud Integrated Storage security, Steelstore Cloud Integrated Storage CVE, Netapp Steelstore Cloud Integrated Storage, Steelstore Cloud Integrated Storage threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Steelstore Cloud Integrated Storage KEV, Steelstore Cloud Integrated Storage exploited vulnerabilities",{"@context":92,"@type":93,"name":94,"description":89,"url":95,"manufacturer":96,"applicationCategory":100,"softwareVersion":101,"mainEntity":102},"https:\u002F\u002Fschema.org","SoftwareApplication","Steelstore Cloud Integrated Storage","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fsteelstore_cloud_integrated_storage",{"@type":97,"name":98,"url":99},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":103,"name":104,"description":105,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Steelstore Cloud Integrated Storage Security Vulnerabilities","Security vulnerabilities affecting Steelstore Cloud Integrated Storage by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":107,"apiVersion":108},"2026-10-17T12:49:45.542Z","3.0",[],{"rows":111,"total":11,"capped":24,"failed":9},[112,116],{"cveId":40,"name":79,"severity":31,"cvss":30,"added":80,"epss":43,"published":113,"ranges":114,"checked":4,"hits":115,"covers":24},"2019-07-17T13:15:10.687",[],[],{"cveId":27,"name":84,"severity":31,"cvss":30,"added":85,"epss":32,"published":117,"ranges":118,"checked":4,"hits":119,"covers":24},"2019-10-11T19:15:10.947",[],[]]