2021 CVEs (page 13)
Page 13 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46969 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Fix invalid error returning in mhi_queue mhi_queue returns an error when… |
CVE-2021-46968 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix zcard and zqueue hot-unplug memleak Tests with kvm and a kmemdebug kerne… |
CVE-2021-46967 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually… |
CVE-2021-46966 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is always free… |
CVE-2021-46965 | High | 7.1 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to (char *) in o… |
CVE-2021-46964 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e ("scsi: qla2xxx: Limit inter… |
CVE-2021-46963 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() RIP: 0010:kmem_cache_free+0xfa/0x… |
CVE-2021-46962 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: Fix a resource leak in the remove function A 'tmio_mmc_host_free()' cal… |
CVE-2021-46961 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Do not enable irqs when handling spurious interrups We triggered the foll… |
CVE-2021-46960 | High | 7.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: cifs: Return correct error code from smb2_get_enc_key Avoid a warning if the error percol… |
CVE-2021-46958 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free There is… |
CVE-2021-46957 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe The execution of s… |
CVE-2021-46956 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix memory leak in virtio_fs_probe() When accidentally passing twice the same t… |
CVE-2021-46955 | High | 8.2 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on ker… |
CVE-2021-46954 | High | 7.1 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets when 'act_mirred'… |
CVE-2021-46953 | Medium | 6.7 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the d… |
CVE-2021-46952 | High | 7.1 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds Fix shift out-of-bou… |
CVE-2021-46951 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local variable for calculating final log size When tpm_read_log_efi is call… |
CVE-2021-46950 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch address… |
CVE-2021-46949 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX flush done handling We're starting from a TXQ insta… |
CVE-2021-46948 | High | 7.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX event handling We're starting from a TXQ label, not… |
CVE-2021-46947 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues efx->xdp_t… |
CVE-2021-46945 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ext4: always panic when errors=panic is specified Before commit 014c9caa29d3 ("ext4: make… |
CVE-2021-46944 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix memory leak in imu_fmt We are losing the reference to an a… |
CVE-2021-46943 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix set_fmt error handling If there in an error during a set_f… |
CVE-2021-46942 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix shared sqpoll cancellation hangs [ 736.982891] INFO: task iou-sqp-4294:429… |
CVE-2021-46941 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide… |
CVE-2021-46940 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting The idx_to_offset()… |
CVE-2021-46939 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure trace_clock_global() to never block It was reported that a fix to th… |
CVE-2021-46938 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails When loadin… |
CVE-2021-46937 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' DAMON debugfs interf… |
CVE-2021-46936 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue was found as follow… |
CVE-2021-46935 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix async_free_space accounting for empty parcels In 4.13, commit 74310e06be4d ("… |
CVE-2021-46934 | Low | 3.3 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2c_transfer… |
CVE-2021-46933 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clear is indirectly call… |
CVE-2021-46932 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warnin… |
CVE-2021-46931 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq Function mlx5e_tx_reporte… |
CVE-2021-46930 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitialization of list_head. … |
CVE-2021-46929 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling c… |
CVE-2021-46928 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale IIR value on instruction access rights trap When a trap 7 (Instructio… |
CVE-2021-46927 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert After commit 5b7… |
CVE-2021-46926 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently set… |
CVE-2021-46925 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs when smc_cdc_tx_handl… |
CVE-2021-46924 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced w… |
CVE-2021-46923 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make sure that finish_mount_kattr() is calle… |
CVE-2021-46922 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM reservation for seal/unseal The original patch 8c657a0590de ("KEYS… |
CVE-2021-46921 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queued_write_lock_slowpath() While this code is executed… |
CVE-2021-46920 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly w… |
CVE-2021-46919 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the… |
CVE-2021-46918 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: clear MSIX permission entry on shutdown Add disabling/clearing of MSIX p… |
CVE-2021-46917 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workarou… |
CVE-2021-46916 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ethtool loopback test The ixgbe driver currently g… |
CVE-2021-46915 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: avoid possible divide error in nft_limit_init div_u64() divides u64… |
CVE-2021-46914 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix unbalanced device enable/disable in suspend/resume pci_disable_device() called… |
CVE-2021-46913 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set element expression template memcpy() breaks when using con… |
CVE-2021-46912 | High | 7.3 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: Make tcp_allowed_congestion_control readonly in non-init netns Currently, tcp_allowe… |
CVE-2021-46911 | Critical | 9.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel panic somet… |
CVE-2021-46910 | High | 7.0 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled The debuggi… |
CVE-2021-46909 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since commit 30fdfb929e82 ("PCI: Add a call to… |
CVE-2021-46908 | High | 7.1 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unkn… |
CVE-2021-46906 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak in hid_submit_ctrl In hid_submit_ctrl(), the way of calculatin… |
CVE-2021-46905 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix nul… |
CVE-2021-46904 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: hso: fix null-ptr-deref during tty device unregistration Multiple ttys try to claim… |
CVE-2021-33162 | High | 8.4 | 2024-02-23 | Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an authenticated user to pote… |
CVE-2021-33161 | High | 7.2 | 2024-02-23 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potent… |
CVE-2021-33158 | High | 7.2 | 2024-02-23 | Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentia… |
CVE-2021-33157 | High | 7.2 | 2024-02-23 | Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged use… |
CVE-2021-33146 | Medium | 5.3 | 2024-02-23 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to… |
CVE-2021-33145 | High | 7.2 | 2024-02-23 | Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially e… |
CVE-2021-33142 | Medium | 6.0 | 2024-02-23 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potent… |
CVE-2021-33141 | High | 8.6 | 2024-02-23 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to… |
CVE-2021-29050 | High | 8.8 | 2024-02-20 | Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before… |
CVE-2021-29038 | Medium | 6.3 | 2024-02-20 | Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versio… |
CVE-2021-46757 | High | 7.8 | 2024-02-13 | Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address spa… |
CVE-2021-4437 | Low | 3.5 | 2024-02-12 | A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some u… |
CVE-2021-4436 | Critical | 9.8 | 2024-02-05 | The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action… |
CVE-2021-46903 | Medium | 6.5 | 2024-02-04 | An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. An admin can delete req… |
CVE-2021-46902 | High | 7.2 | 2024-02-04 | An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. Path validation is mish… |
CVE-2021-4435 | High | 7.7 | 2024-02-04 | An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious c… |
CVE-2021-21575 | Medium | 5.9 | 2024-02-02 | Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability. |
CVE-2021-22281 | Medium | 6.3 | 2024-02-02 | : Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: fro… |
CVE-2021-22282 | High | 8.3 | 2024-02-02 | Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issu… |
CVE-2021-43584 | Medium | 4.8 | 2024-01-24 | DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent (NCPA) before 2.4.0 allows attackers… |
CVE-2021-42147 | Critical | 9.1 | 2024-01-24 | Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denia… |
CVE-2021-42146 | High | 7.5 | 2024-01-24 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two tim… |
CVE-2021-42145 | High | 7.5 | 2024-01-24 | An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of se… |
CVE-2021-42144 | Critical | 9.8 | 2024-01-24 | Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm… |
CVE-2021-42143 | Critical | 9.1 | 2024-01-24 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handshake messag… |
CVE-2021-42142 | Critical | 9.8 | 2024-01-23 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability… |
CVE-2021-42141 | Critical | 9.8 | 2024-01-22 | An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_He… |
CVE-2021-31314 | Critical | 9.8 | 2024-01-20 | File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server. |
CVE-2021-33631 | Medium | 5.5 | 2024-01-18 | Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kern… |
CVE-2021-33630 | Medium | 5.5 | 2024-01-18 | NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with progra… |
CVE-2021-4433 | Medium | 5.3 | 2024-01-18 | A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unknown function of the component HTTP HEAD… |
CVE-2021-4434 | Critical | 10.0 | 2024-01-17 | The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter. This allows… |
CVE-2021-4227 | Medium | 5.3 | 2024-01-16 | The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an… |
CVE-2021-25117 | Medium | 4.8 | 2024-01-16 | The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratin… |
CVE-2021-24870 | Medium | 6.1 | 2024-01-16 | The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some… |
CVE-2021-24869 | High | 8.8 | 2024-01-16 | The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to… |
CVE-2021-24567 | Medium | 5.4 | 2024-01-16 | The Simple Post WordPress plugin through 1.1 does not sanitize user input when an authenticated user Text value, then it does not escape these values when outp… |