Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-46665 State: PUBLISHED Published: 2022-02-01T01:47:15 Last Updated: 2024-08-04T05:17:41.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-25636 - https://security.netapp.com/advisory/ntap-20220221-0002/ - https://mariadb.com/kb/en/security/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ge/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE ID: CVE-2021-46666 State: PUBLISHED Published: 2022-02-01T01:47:03 Last Updated: 2024-08-04T05:17:41.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-25635 - https://security.netapp.com/advisory/ntap-20220221-0002/ - https://mariadb.com/kb/en/security/
CVE ID: CVE-2021-46667 State: PUBLISHED Published: 2022-02-01T01:46:48 Last Updated: 2024-08-04T05:17:41.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-26350 - https://security.netapp.com/advisory/ntap-20220221-0002/ - https://mariadb.com/kb/en/security/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJR
RAM6ZEAJJWWMRUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE ID: CVE-2021-46668 State: PUBLISHED Published: 2022-02-01T01:46:34 Last Updated: 2024-08-04T05:17:41.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-25787 - https://security.netapp.com/advisory/ntap-20220221-0002/ - https://mariadb.com/kb/en/security/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE ID: CVE-2021-46669 State: PUBLISHED Published: 2022-02-01T01:46:16 Last Updated: 2024-08-04T05:17:41.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-25638 - https://security.netapp.com/advisory/ntap-20220221-0002/ - https://mariadb.com/kb/en/security/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRJCSPQHYPKTWXXZVDMY6JAHZJQ4TZ5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40li
ject.org/message/FRJCSPQHYPKTWXXZVDMY6JAHZJQ4TZ5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KHEOTQ63YWC3PGHGDFGS7AZIEXCGOPWH/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html
CVE ID: CVE-2021-46671 State: PUBLISHED Published: 2022-02-04T20:13:47 Last Updated: 2024-08-04T05:17:41.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/atftp/code/ci/9cf799c40738722001552618518279e9f0ef62e5 - https://bugs.debian.org/1004974 - https://lists.debian.org/debian-lts-announce/2022/05/msg00040.html
CVE ID: CVE-2021-46676 State: PUBLISHED Published: 2022-08-05T15:25:56.304746Z Last Updated: 2024-09-16T18:56:02.546Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the transactional maps name field. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2021-46677 State: PUBLISHED Published: 2022-08-05T15:26:09.756861Z Last Updated: 2024-09-17T03:08:10.175Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the event filter name field. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2021-46678 State: PUBLISHED Published: 2022-08-05T15:26:35.439583Z Last Updated: 2024-09-17T03:48:13.539Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the service name field. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2021-46679 State: PUBLISHED Published: 2022-08-05T15:25:41.856562Z Last Updated: 2024-09-16T23:21:46.460Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2021-46680 State: PUBLISHED Published: 2022-08-05T15:26:24.428728Z Last Updated: 2024-09-16T23:35:24.422Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2021-46681 State: PUBLISHED Published: 2022-08-05T15:25:33.950122Z Last Updated: 2024-09-17T02:47:51.973Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via module massive operation name field. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://www.incibe.es/en/cve-assignment-publication/coordinated-cves
CVE ID: CVE-2021-46686 State: PUBLISHED Published: 2025-02-17T23:58:10.727Z Last Updated: 2025-02-18T15:41:25.766Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Extra Innovation Inc. Products: acmailer CGI, acmailer DB Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://acmailer.jp/info/de.cgi?id=103 - https://www.acmailer.jp/info/
yst Notes: - CISA ADP Vulnrichment: References: - https://acmailer.jp/info/de.cgi?id=103 - https://www.acmailer.jp/info/de.cgi?id=102 - https://jvn.jp/en/jp/JVN96957439/
CVE ID: CVE-2021-46687 State: PUBLISHED Published: 2022-07-06T09:35:11 Last Updated: 2024-08-04T05:17:41.514Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: JFrog Products: JFrog Artifactory Problem Types: CWE-359 Description: JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog+Securi
tional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46687%3A+Sensitive+data+exposure+on+proxy+endpoint+for+Project+Admin
CVE ID: CVE-2021-46699 State: PUBLISHED Published: 2022-02-22T17:52:42 Last Updated: 2024-08-04T05:17:42.218Z Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-121 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack based buffer overflow vulnerability while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15061) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-949188.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-509/
CVE ID: CVE-2021-46700 State: PUBLISHED Published: 2022-02-19T18:22:19 Last Updated: 2024-08-04T05:17:41.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/158
CVE ID: CVE-2021-46701 State: PUBLISHED Published: 2022-02-20T20:20:27 Last Updated: 2024-08-04T05:17:42.409Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PreMiD/PreMiD/pull/791 - https://github.com/PreMiD/PreMiD/issues/790
CVE ID: CVE-2021-46702 State: PUBLISHED Published: 2022-02-26T02:56:26 Last Updated: 2024-08-04T05:17:42.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.sciencedirect.com/science/article/pii/S0167404821
onal Analyst Notes: - CVE Program Container: References: - https://www.sciencedirect.com/science/article/pii/S0167404821001358
CVE ID: CVE-2021-46703 State: PUBLISHED Published: 2022-03-06T05:29:07 Last Updated: 2024-08-04T05:17:41.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Antaris/RazorEngine/issues/585
CVE ID: CVE-2021-46704 State: PUBLISHED Published: 2022-03-06T06:23:47 Last Updated: 2024-08-04T05:17:41.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/genieacs/genieacs/releases/tag/v1.2.8 - https://github.com/genieacs/genieacs/commit/7f295beeecc1c1f14308a93c82413bb334045af6
CVE ID: CVE-2021-46705 State: PUBLISHED Published: 2022-03-16T09:50:10.172983Z Last Updated: 2024-09-16T19:46:27.891Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: SUSE Products: SUSE Linux Enterprise Server 15 SP4, openSUSE Factory Problem Types: CWE-377 Description: A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1. Additional Analyst Notes: - CVE Program Container: References: - https
enSUSE Factory grub2 versions prior to 2.06-18.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1190474
CVE ID: CVE-2021-46708 State: PUBLISHED Published: 2022-03-11T06:47:56 Last Updated: 2024-08-04T05:17:41.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-SWAGGERUIDIST-2314884 - https://www.npmjs.com/package/swagger-ui-dist/v/4.1.3 - https://security.netap
k.io/vuln/SNYK-JS-SWAGGERUIDIST-2314884 - https://www.npmjs.com/package/swagger-ui-dist/v/4.1.3 - https://security.netapp.com/advisory/ntap-20220407-0004/
CVE ID: CVE-2021-46709 State: PUBLISHED Published: 2022-03-13T18:25:13 Last Updated: 2024-08-04T05:17:41.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number). Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/phpliteadmin/public/issues/399/xss-vulnerability
CVE ID: CVE-2021-46740 State: PUBLISHED Published: 2022-04-11T19:38:23 Last Updated: 2024-08-04T05:17:41.755Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202204-0000001224076294
CVE ID: CVE-2021-46741 State: PUBLISHED Published: 2022-07-11T13:52:47 Last Updated: 2024-08-04T05:17:41.587Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Weaknesses Introduced During Design Description: The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202207-0000001342389149 - https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE ID: CVE-2021-46742 State: PUBLISHED Published: 2022-04-11T19:38:22 Last Updated: 2024-08-04T05:17:42.390Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Unauthorized insertion vulnerability Description: The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202204-0000001224076294
CVE ID: CVE-2021-46743 State: PUBLISHED Published: 2022-03-29T06:40:18 Last Updated: 2024-08-04T05:17:41.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are loaded in a key ring. This allows an attacker to forge tokens that validate under the incorrect key. NOTE: this provides a straightforward way to use the PHP-JWT library unsafely, but might not be considered a vulnerability in the library itself. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firebase/php-jwt/issues/351
CVE ID: CVE-2021-46744 State: PUBLISHED Published: 2022-05-11T16:40:21.925600Z Last Updated: 2024-09-16T23:46:24.093Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1033 - http://www.openwall.com/lists/oss-security/2022/08/08/6
CVE ID: CVE-2021-46746 State: PUBLISHED Published: 2024-08-13T16:50:51.023Z Last Updated: 2024-10-31T13:57:25.237Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: AMD Products: AMD EPYC™ 7001 Processors, AMD EPYC™ 7002 Processors, AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryze
D Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, A
ics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors, AMD EPYC™ Embedded 3000 Series Processors, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9003 Series Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processor
mbedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Description: Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing keys to c006Frrupt the return address, causing a stack-based buffer overrun, potentially leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE ID: CVE-2021-46748 State: PUBLISHED Published: 2023-11-14T18:50:52.470Z Last Updated: 2025-02-13T16:28:47.934Z Vendors: AMD Products: Radeon™ RX 5000/6000/7000 Series Graphics Cards, Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards, Radeon™ RX Vega Series Graphics Cards, Radeon™ PRO WX Vega Series Graphics Cards Description: Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 - https://ww
CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html
CVE ID: CVE-2021-46749 State: PUBLISHED Published: 2023-05-09T18:59:39.837Z Last Updated: 2025-01-28T15:42:05.273Z Vendors: AMD Products: Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryze