Known Vulnerabilities for Trident by Netapp
Listed below are 10 of the newest known vulnerabilities associated with "Trident" by "Netapp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-34558 | The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matc... | 6.5 - MEDIUM | 2021-07-15 | 2023-11-07 |
| CVE-2021-25742 | A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom sn... | 7.1 - HIGH | 2021-10-29 | 2021-12-15 |
| CVE-2020-29511 | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during ... | 5.6 - MEDIUM | 2020-12-14 | 2023-07-27 |
| CVE-2020-29510 | The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during token... | 5.6 - MEDIUM | 2020-12-14 | 2021-01-30 |
| CVE-2020-29509 | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes durin... | 5.6 - MEDIUM | 2020-12-14 | 2023-07-27 |
| CVE-2020-28367 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via m... | 7.5 - HIGH | 2020-11-18 | 2023-11-07 |
| CVE-2020-28366 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a... | 7.5 - HIGH | 2020-11-18 | 2023-11-07 |
| CVE-2020-28362 | Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. | 7.5 - HIGH | 2020-11-18 | 2023-11-07 |
| CVE-2019-11243 | In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, wit... | 8.1 - HIGH | 2019-04-22 | 2020-10-02 |
| CVE-2019-9514 | Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a... | 7.5 - HIGH | 2019-08-13 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Netapp | Trident | - | All | All | All |