High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-09	CVE-2022-45061	Algorithmic Complexity vulnerability in multiple products An issue was discovered in Python before 3.11.1. network low complexity python fedoraproject netapp CWE-407	7.5
2022-10-13	CVE-2022-31123	Improper Verification of Cryptographic Signature vulnerability in multiple products Grafana is an open source observability and data visualization platform. local low complexity grafana netapp CWE-347	7.8
2022-08-24	CVE-2021-3999	Off-by-one Error vulnerability in multiple products A flaw was found in glibc. local low complexity gnu debian netapp CWE-193	7.8
2022-07-15	CVE-2022-31107	Incorrect Authorization vulnerability in multiple products Grafana is an open-source platform for monitoring and observability. network high complexity grafana netapp CWE-863	7.5
2022-07-15	CVE-2022-31097	Cross-site Scripting vulnerability in multiple products Grafana is an open-source platform for monitoring and observability. network low complexity grafana netapp CWE-79	8.7
2022-02-08	CVE-2022-21703	Cross-Site Request Forgery (CSRF) vulnerability in multiple products Grafana is an open-source platform for monitoring and observability. network low complexity grafana netapp fedoraproject CWE-352	8.8
2021-12-14	CVE-2021-4044	Infinite Loop vulnerability in multiple products Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. network low complexity openssl netapp nodejs CWE-835	7.5
2021-05-28	CVE-2021-33587	The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input. network low complexity css-what-project netapp	7.5
2021-05-28	CVE-2021-33623	Resource Exhaustion vulnerability in multiple products The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method. network low complexity trim-newlines-project netapp debian CWE-400	7.5
2021-05-04	CVE-2021-23383	The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source. network low complexity handlebarsjs netapp	7.5