# Netapp Solidfire \& Hci Management Node


- [CVE-2022-0492](https://insights.sbomify.com/CVE-2022-0492/): Linux Kernel Improper Authentication (high 7.8, exploited in the wild)
- [CVE-2024-36958](https://insights.sbomify.com/CVE-2024-36958/): NFSD: Fix nfsd4_encode_fattr4() crasher (critical 9.8)
- [CVE-2022-1292](https://insights.sbomify.com/CVE-2022-1292/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2021-26987](https://insights.sbomify.com/CVE-2021-26987/): Code injection in Element Plug-in for vCenter Server (critical 9.8)
- [CVE-2024-40896](https://insights.sbomify.com/CVE-2024-40896/): XML external entity in libxml2 (critical 9.1)
- [CVE-2023-38426](https://insights.sbomify.com/CVE-2023-38426/): Memory corruption in n/a (critical 9.1)
- [CVE-2023-38428](https://insights.sbomify.com/CVE-2023-38428/): Information disclosure in n/a (critical 9.1)
- [CVE-2023-38431](https://insights.sbomify.com/CVE-2023-38431/): Information disclosure in n/a (critical 9.1)
- [CVE-2023-5178](https://insights.sbomify.com/CVE-2023-5178/): Kernel: use after free in nvmet_tcp_free_crypto in nvme (high 8.8)
- [CVE-2021-45960](https://insights.sbomify.com/CVE-2021-45960/): Integer overflow in n/a (high 8.8)
- [CVE-2020-29569](https://insights.sbomify.com/CVE-2020-29569/): Use after free in n/a (high 8.8)
- [CVE-2022-27778](https://insights.sbomify.com/CVE-2022-27778/): Other in https://github.com/curl/curl (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/solidfire-%5C-hci-management-node/