2021 CVEs (page 49)
Page 49 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3398 | Medium | 5.8 | 2022-02-10 | Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. |
CVE-2021-37613 | Medium | 6.5 | 2022-02-10 | Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. |
CVE-2021-31814 | Medium | 6.1 | 2022-02-10 | In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SS… |
CVE-2021-45901 | Medium | 5.3 | 2022-02-10 | The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists. |
CVE-2021-25992 | Critical | 9.8 | 2022-02-10 | In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to re… |
CVE-2021-44454 | High | 7.8 | 2022-02-09 | Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potential… |
CVE-2021-40045 | Medium | 5.5 | 2022-02-09 | There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may… |
CVE-2021-40044 | High | 8.8 | 2022-02-09 | There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations. |
CVE-2021-40015 | Medium | 4.7 | 2022-02-09 | There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability. |
CVE-2021-39997 | Critical | 9.8 | 2022-02-09 | There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds a… |
CVE-2021-39994 | Critical | 9.8 | 2022-02-09 | There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2021-39992 | High | 7.8 | 2022-02-09 | There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality… |
CVE-2021-39991 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-39986 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-39943 | Medium | 4.3 | 2022-02-09 | An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all versions starting from… |
CVE-2021-37115 | Medium | 5.5 | 2022-02-09 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serv… |
CVE-2021-37109 | High | 7.8 | 2022-02-09 | There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure. |
CVE-2021-37107 | Medium | 5.5 | 2022-02-09 | There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-33166 | Medium | 5.5 | 2022-02-09 | Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information… |
CVE-2021-33155 | Medium | 5.7 | 2022-02-09 | Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authentic… |
CVE-2021-33147 | Medium | 5.5 | 2022-02-09 | Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure… |
CVE-2021-33139 | Medium | 5.7 | 2022-02-09 | Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authentic… |
CVE-2021-33137 | High | 7.8 | 2022-02-09 | Out-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2021-33129 | High | 7.8 | 2022-02-09 | Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to potentially enable… |
CVE-2021-33120 | Medium | 5.4 | 2022-02-09 | Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially… |
CVE-2021-33119 | Medium | 5.5 | 2022-02-09 | Improper access control in the Intel(R) RealSense(TM) DCM before version 20210625 may allow an authenticated user to potentially enable information disclosure… |
CVE-2021-33115 | High | 8.8 | 2022-02-09 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via ad… |
CVE-2021-33114 | Medium | 5.7 | 2022-02-09 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authentica… |
CVE-2021-33113 | High | 8.1 | 2022-02-09 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenti… |
CVE-2021-33110 | Medium | 6.5 | 2022-02-09 | Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may a… |
CVE-2021-33107 | Medium | 4.6 | 2022-02-09 | Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before… |
CVE-2021-33105 | Medium | 5.5 | 2022-02-09 | Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an authenticated user t… |
CVE-2021-33101 | High | 7.8 | 2022-02-09 | Uncontrolled search path in the Intel(R) GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via loc… |
CVE-2021-33096 | Medium | 5.5 | 2022-02-09 | Improper isolation of shared resources in network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potential… |
CVE-2021-33068 | Medium | 6.5 | 2022-02-09 | Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via netw… |
CVE-2021-33061 | Medium | 5.5 | 2022-02-09 | Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of s… |
CVE-2021-26616 | High | 7.8 | 2022-02-09 | An OS command injection was found in SecuwaySSL, when special characters injection on execute command with runCommand arguments. |
CVE-2021-26613 | High | 8.1 | 2022-02-09 | improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method. |
CVE-2021-23152 | High | 7.8 | 2022-02-09 | Improper access control in the Intel(R) Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2021-22954 | High | 8.8 | 2022-02-09 | A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users. |
CVE-2021-22817 | High | 7.8 | 2022-02-09 | A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privileg… |
CVE-2021-0183 | Medium | 6.5 | 2022-02-09 | Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some… |
CVE-2021-0179 | Medium | 6.5 | 2022-02-09 | Improper Use of Validation Framework in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user… |
CVE-2021-0178 | Medium | 6.5 | 2022-02-09 | Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potenti… |
CVE-2021-0177 | Medium | 6.5 | 2022-02-09 | Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthent… |
CVE-2021-0176 | Medium | 4.4 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0175 | Medium | 6.5 | 2022-02-09 | Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some… |
CVE-2021-0174 | Medium | 6.5 | 2022-02-09 | Improper Use of Validation Framework in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10… |
CVE-2021-0173 | Medium | 6.5 | 2022-02-09 | Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in… |
CVE-2021-0172 | Medium | 6.5 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0171 | Medium | 5.5 | 2022-02-09 | Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially… |
CVE-2021-0170 | Medium | 5.5 | 2022-02-09 | Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM… |
CVE-2021-0169 | Medium | 6.7 | 2022-02-09 | Uncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalati… |
CVE-2021-0168 | Medium | 6.7 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0167 | Medium | 6.7 | 2022-02-09 | Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially ena… |
CVE-2021-0166 | Medium | 6.7 | 2022-02-09 | Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM… |
CVE-2021-0165 | Medium | 6.5 | 2022-02-09 | Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an u… |
CVE-2021-0164 | High | 7.8 | 2022-02-09 | Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an una… |
CVE-2021-0163 | High | 8.8 | 2022-02-09 | Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthent… |
CVE-2021-0162 | High | 8.8 | 2022-02-09 | Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potenti… |
CVE-2021-0161 | Medium | 6.7 | 2022-02-09 | Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a pr… |
CVE-2021-0156 | High | 7.8 | 2022-02-09 | Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via loc… |
CVE-2021-0147 | Medium | 4.4 | 2022-02-09 | Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_lbg_b0-21ww02a may a… |
CVE-2021-0145 | Medium | 5.5 | 2022-02-09 | Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… |
CVE-2021-0127 | Medium | 5.5 | 2022-02-09 | Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access. |
CVE-2021-0125 | Medium | 6.6 | 2022-02-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-0124 | Medium | 6.6 | 2022-02-09 | Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-0119 | Medium | 6.2 | 2022-02-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-0118 | Medium | 6.7 | 2022-02-09 | Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
CVE-2021-0117 | High | 7.8 | 2022-02-09 | Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
CVE-2021-0116 | High | 7.8 | 2022-02-09 | Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. |
CVE-2021-0115 | Medium | 6.7 | 2022-02-09 | Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2021-0111 | Medium | 6.7 | 2022-02-09 | NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local ac… |
CVE-2021-0107 | Medium | 6.7 | 2022-02-09 | Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2021-0103 | Medium | 6.7 | 2022-02-09 | Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege… |
CVE-2021-0099 | High | 7.8 | 2022-02-09 | Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privil… |
CVE-2021-0093 | Medium | 4.4 | 2022-02-09 | Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local acce… |
CVE-2021-0092 | Medium | 4.4 | 2022-02-09 | Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access. |
CVE-2021-0091 | High | 7.8 | 2022-02-09 | Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via loc… |
CVE-2021-0076 | Medium | 5.5 | 2022-02-09 | Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some… |
CVE-2021-0072 | Medium | 5.5 | 2022-02-09 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may… |
CVE-2021-0066 | High | 8.4 | 2022-02-09 | Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an u… |
CVE-2021-0060 | Medium | 6.6 | 2022-02-09 | Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, S… |
CVE-2021-45286 | Medium | 5.3 | 2022-02-09 | Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php. |
CVE-2021-41442 | High | 7.5 | 2022-02-09 | An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application… |
CVE-2021-36302 | Critical | 9.9 | 2022-02-09 | All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level… |
CVE-2021-45331 | Critical | 9.8 | 2022-02-09 | An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA c… |
CVE-2021-45330 | Critical | 9.8 | 2022-02-09 | An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains… |
CVE-2021-41441 | High | 7.4 | 2022-02-09 | A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a spec… |
CVE-2021-46161 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of… |
CVE-2021-46160 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of… |
CVE-2021-46159 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of… |
CVE-2021-46158 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack ba… |
CVE-2021-46157 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a memory c… |
CVE-2021-46156 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of… |
CVE-2021-46155 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack ba… |
CVE-2021-46154 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack ba… |
CVE-2021-46153 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a memory c… |
CVE-2021-46152 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a type con… |
CVE-2021-46151 | High | 7.8 | 2022-02-09 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of… |