2021 CVEs (page 6)
Page 6 of 235 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38122 | Medium | 6.2 | 2024-08-28 | A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This iss… |
CVE-2021-38121 | High | 8.3 | 2024-08-28 | Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. … |
CVE-2021-38120 | Medium | 5.1 | 2024-08-28 | A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper ha… |
CVE-2021-22530 | High | 8.2 | 2024-08-28 | A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This i… |
CVE-2021-22529 | Medium | 6.3 | 2024-08-28 | A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication version bef… |
CVE-2021-22509 | High | 8.1 | 2024-08-28 | A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user… |
CVE-2021-4441 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() In zynq_qsp… |
CVE-2021-46772 | Low | 3.9 | 2024-08-13 | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI… |
CVE-2021-46746 | Medium | 5.2 | 2024-08-13 | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing key… |
CVE-2021-26387 | Low | 3.9 | 2024-08-13 | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions… |
CVE-2021-26367 | Medium | 5.7 | 2024-08-13 | A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, pot… |
CVE-2021-26344 | High | 7.2 | 2024-08-13 | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image… |
CVE-2021-47624 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change The refcount leak is… |
CVE-2021-47623 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling… |
CVE-2021-47622 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Fix a deadlock in the error handler The following deadlock has been observed o… |
CVE-2021-4440 | High | 8.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit afd30525a659ac0ae0904f0cb4a2ca75522c31… |
CVE-2021-45785 | Medium | 6.5 | 2024-06-24 | TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would allow an attacker to restart the server, c… |
CVE-2021-47621 | High | 7.5 | 2024-06-21 | ClassGraph before 4.8.112 was not resistant to XML eXternal Entity (XXE) attacks. |
CVE-2021-4439 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: isdn: cpai: check ctr->cnr to avoid array index out of bound The cmtp_add_connection() wo… |
CVE-2021-47620 | High | 8.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being perfor… |
CVE-2021-47619 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP When XDP was configured on a system with large numbe… |
CVE-2021-47618 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9170/1: fix panic when kasan and kprobe are enabled arm32 uses software to simulate… |
CVE-2021-47617 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault The Power Fault Detected b… |
CVE-2021-47616 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxe_queue_cleanup On error handling path in rxe_qp_from_init(… |
CVE-2021-47614 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a user-after-free in add_pble_prm When irdma_hmc_sd_one fails, 'chunk' is… |
CVE-2021-47613 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: fix completion handling The driver currently assumes that the notify callbac… |
CVE-2021-47612 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfc_genl_dump_devices_done When kmalloc in nfc_genl_dump_devices() f… |
CVE-2021-47611 | High | 8.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended… |
CVE-2021-47610 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null ptr access msm_ioctl_gem_submit() Fix the below null pointer dereferenc… |
CVE-2021-47609 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound checks for… |
CVE-2021-47608 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kernel address leakage in atomic fetch The change in commit 37086bfdc737 ("bpf… |
CVE-2021-47607 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg The implementation of BPF_… |
CVE-2021-47606 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: netlink: af_netlink: Prevent empty skb by adding a check on len. Adding a check on l… |
CVE-2021-47605 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: vduse: fix memory corruption in vduse_dev_ioctl() The "config.offset" comes from the user… |
CVE-2021-47604 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in get_config() This condition checks "len" but… |
CVE-2021-47603 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: audit: improve robustness of the audit queue handling If the audit daemon were ever to ge… |
CVE-2021-47602 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obvious… |
CVE-2021-47601 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an IS_ERR() vs NULL bug The __get_free_pages() function does not return… |
CVE-2021-47600 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: dm btree remove: fix use after free in rebalance_children() Move dm_tm_unlock() after dm_… |
CVE-2021-47599 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: use latest_dev in btrfs_show_devname The test case btrfs/238 reports the warning b… |
CVE-2021-47598 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: sch_cake: do not call cake_destroy() from cake_init() qdiscs are not supposed to call the… |
CVE-2021-47597 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: fix kernel-infoleak for UDP sockets KMSAN reported a kernel-infoleak [1], that… |
CVE-2021-47596 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg Currently, the hns3_remove func… |
CVE-2021-47595 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't remove idle classes from the round-robin list Shuang reported t… |
CVE-2021-47594 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: never allow the PM to close a listener subflow Currently, when deleting an endpoin… |
CVE-2021-47593 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: clear 'kern' flag from fallback sockets The mptcp ULP extension relies on sk->sk_s… |
CVE-2021-47592 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix tc flower deletion for VLAN priority Rx steering To replicate the issue… |
CVE-2021-47591 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be used for mptcp beca… |
CVE-2021-47590 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in __mptcp_push_pending() __mptcp_push_pending() may call mptcp_flush… |
CVE-2021-47589 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in `igbvf_probe` In `igbvf_probe`, if register_netdev() fails, the… |
CVE-2021-47588 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6_dev_free() from sit_init_net() ipip6_dev_free is sit dev->priv_des… |
CVE-2021-47587 | Critical | 9.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descriptor list is a sha… |
CVE-2021-47586 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup KASAN reports an out-of-bounds read… |
CVE-2021-47585 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in __add_inode_ref() Line 1169 (#3) allocates a memory chunk for v… |
CVE-2021-47584 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: iocost: Fix divide-by-zero on donation from low hweight cgroup The donation calculation l… |
CVE-2021-47583 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutex_init() location Syzbot reported, that mxl111sf_ctrl_msg() u… |
CVE-2021-47582 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Make do_proc_control() and do_proc_bulk() killable The USBDEVFS_CONTROL and US… |
CVE-2021-47580 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix type in min_t to avoid stack OOB Change min_t() to use type "u32" i… |
CVE-2021-47579 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovl_create_real() Syzbot triggered the following warning in ovl_workd… |
CVE-2021-47578 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Don't call kcalloc() if size arg is zero If the size arg to kcalloc() i… |
CVE-2021-47577 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: io-wq: check for wq exit after adding new worker task_work We check IO_WQ_BIT_EXIT before… |
CVE-2021-47576 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() In resp_mode… |
CVE-2021-3899 | High | 7.8 | 2024-06-03 | There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as roo… |
CVE-2021-44534 | Medium | 6.5 | 2024-05-31 | Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure. |
CVE-2021-47572 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an… |
CVE-2021-47571 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() The free_rtllib() funct… |
CVE-2021-47570 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: fix a memory leak in rtw_wx_read32() Free "ptmp" before returning -EINV… |
CVE-2021-47569 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/io_uring.c:62… |
CVE-2021-47568 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in get_file_stream_info() Fix memleak in get_file_stream_info() |
CVE-2021-47567 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 ("powerpc… |
CVE-2021-47566 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: proc/vmcore: fix clearing user buffer by properly using clear_user() To clear a user buff… |
CVE-2021-47565 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's s… |
CVE-2021-47564 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix double free issue on err path fix error path handling in pres… |
CVE-2021-47563 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpf_prog refcount underflow Ice driver has the routines for managing XDP resou… |
CVE-2021-47562 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix vsi->txq_map sizing The approach of having XDP queue per CPU regardless of user'… |
CVE-2021-47561 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect dat… |
CVE-2021-47560 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events g… |
CVE-2021-47559 | High | 7.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() Coverity reports a possibl… |
CVE-2021-47558 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Disable Tx queues when reconfiguring the interface The Tx queues were not di… |
CVE-2021-47557 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't peek at classes beyond 'nbands' when the number of DRR classes… |
CVE-2021-47556 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() ethtool_set_coalesce()… |
CVE-2021-47555 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the real_dev refcnt Inject error before dev_hold(real_dev) i… |
CVE-2021-47554 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: avoid putting an uninitialized iova_domain The system will crash if we put an u… |
CVE-2021-47553 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringup_cpu() To hot unplug a CPU, the idle task on… |
CVE-2021-47552 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() For avoi… |
CVE-2021-47551 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again In SRIOV conf… |
CVE-2021-47550 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init… |
CVE-2021-47549 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl When the `rmmod sata_fsl.ko`… |
CVE-2021-47548 | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst… |
CVE-2021-47547 | Medium | 4.4 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound In lin… |
CVE-2021-47546 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6_rule_suppress The kernel leaks memory when a `fib` rule is… |
CVE-2021-47544 | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for… |
CVE-2021-47542 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In qlcnic_… |
CVE-2021-47541 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_al… |
CVE-2021-47540 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode Fix the following NULL… |
CVE-2021-47539 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for bu… |
CVE-2021-47538 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for pee… |
CVE-2021-47537 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix a memleak bug in rvu_mbox_init() In rvu_mbox_init(), mbox_regions is no… |
CVE-2021-47536 | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix wrong list_del in smc_lgr_cleanup_early smc_lgr_cleanup_early() meant to del… |
CVE-2021-47535 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Allocate enough space for GMU registers In commit 142639a52a01 ("drm/msm/a6… |