Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-33035 State: PUBLISHED Published: 2021-09-23T08:10:10 Last Updated: 2024-08-03T23:42:19.143Z Vendors: Apache Software Foundation Products: Apache OpenOffice Problem Types: CWE-120 Description: Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the allocated space, leading to the execution of arbitrary code by altering the contents of the program stack. This issue affects Apache OpenOffice up to and including version 4.1.10 Additional Ana
he contents of the program stack. This issue affects Apache OpenOffice up to and including version 4.1.10 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/openoffice/commit/efddaef0151af3be16078cc4d88c6bae0f911e56#diff-ea66e734dd358922aba12ad4ba39c96bdc6cbde587d07dbc63d04daa0a30e90f - https://lists.apache.org/thread.html/r929c0c6a53cad64a1007b878342756badbb05ddd9b8f31a6d0b424cb%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r1ab8532e11f41bc7ca057ac7e39cab25f2e1f9d5f4929788ae21c8b9%40%3Cusers.openoffice.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/10/07/3
CVE ID: CVE-2021-33036 State: PUBLISHED Published: 2022-06-15T14:25:14 Last Updated: 2024-08-03T23:42:19.282Z Vendors: Apache Software Foundation Products: Apache Hadoop Problem Types: CWE-264, CWE-24 Description: In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/ctr84rmo3xd2tzqcx2b277c8z692vhl5 - http://www.openwall.com/lists/oss-security/2022/06/15/2 - https://security.netapp.com/advisory/ntap-2022
277c8z692vhl5 - http://www.openwall.com/lists/oss-security/2022/06/15/2 - https://security.netapp.com/advisory/ntap-20220722-0003/
CVE ID: CVE-2021-33037 State: PUBLISHED Published: 2021-07-12T14:55:15 Last Updated: 2024-08-03T23:42:19.203Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-444 Description: Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was th
onse; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r612a79269b0d5e5780c62dfd34286a8037232fec0bc6f1a7e60c9381%40%3Cannounce.tomcat.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://lists.apache.org/thread.html/r40f921575aee8d7d34e53182f862c45cbb8f3d898c9d4e865c2ec262%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/re01e7e93154e8bdf78a11a23f9686427bd3d51fc6e12c508645567b7%40%3Ccommits.tomee.apache.org%3E - https://lists.debian.org/debian-lts-announce/20
11a23f9686427bd3d51fc6e12c508645567b7%40%3Ccommits.tomee.apache.org%3E - https://lists.debian.org/debian-lts-announce/2021/08/msg00009.html - https://www.debian.org/security/2021/dsa-4952 - https://lists.apache.org/thread.html/rd0dfea39829bc0606c936a16f6fca338127c86c0a1083970b45ac8d2%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r290aee55b72811fd19e75ac80f6143716c079170c5671b96932ed44b%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/rf1b54fd3f52f998ca4829159a88cc4c23d6cef5c6447d00948e75c97%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/rc6ef52453bb996a98cb45442871a1db56b7c349939e45d829bf9ae37%40%3Ccommits.tomee.apache
https://lists.apache.org/thread.html/rc6ef52453bb996a98cb45442871a1db56b7c349939e45d829bf9ae37%40%3Ccommits.tomee.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210827-0007/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10366 - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.gentoo.org/glsa/202208-34
CVE ID: CVE-2021-33038 State: PUBLISHED Published: 2021-05-26T13:51:14 Last Updated: 2024-08-03T23:42:19.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during a large migration from Mailman 2 to Mailman 3. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/mailman/hyperkitty/-/issues/380 - https://gitlab.com/mailman/hyperkitty/-/commit/9025324597d60b2dff74
https://gitlab.com/mailman/hyperkitty/-/issues/380 - https://gitlab.com/mailman/hyperkitty/-/commit/9025324597d60b2dff740e49b70b15589d6804fa - https://www.debian.org/security/2021/dsa-4922 - https://techblog.wikimedia.org/2021/06/11/discovering-and-fixing-cve-2021-33038-in-mailman3/
CVE ID: CVE-2021-33040 State: PUBLISHED Published: 2022-01-17T16:14:29 Last Updated: 2024-08-03T23:42:19.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/futurepress/epub.js/blob/5c7f21d648d9d20d44c6c365d164b16871847023/src/managers/views/iframe.js#L373 - https://github.com/futurepress/epub.js/compare/v0.3.88...v0.3.89 - https://github.com/futurepress/epub.js/commit/ab4dd46408cce0324e1c67de4a3ba96b59e5012e
CVE ID: CVE-2021-33041 State: PUBLISHED Published: 2021-05-17T16:04:23 Last Updated: 2024-08-03T23:42:19.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmd through 1.34.0 allows 'div class="markdown-body"' XSS, as demonstrated by Electron remote code execution via require('child_process').execSync('calc.exe') on Windows and a similar attack on macOS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yoshuawuyts/vmd/issues/137
CVE ID: CVE-2021-33044 State: PUBLISHED Published: 2021-09-15T21:36:04.000Z Last Updated: 2025-10-21T23:25:32.563Z Vendors: n/a Products: Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices Problem Types: Improper Authentication Description: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dahuasecurity.com/support/cybersecurity/details/957 - http://seclists.org/fulldisclosure/2021/Oct/13 - http://packetstormsecurity.com/
com/support/cybersecurity/details/957 - http://seclists.org/fulldisclosure/2021/Oct/13 - http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
CVE ID: CVE-2021-33045 State: PUBLISHED Published: 2021-09-15T21:50:08.000Z Last Updated: 2025-10-21T23:25:32.413Z Vendors: n/a Products: Some Dahua IP Camera, Video Intercom, NVR, XVR devices Problem Types: Improper Authentication Description: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dahuasecurity.com/support/cybersecurity/details/957 - http://seclists.org/fulldisclosure/2021/Oct/13 - http://packetstormsecurity.com/files/164423/Dahua-Auth
ty/details/957 - http://seclists.org/fulldisclosure/2021/Oct/13 - http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
CVE ID: CVE-2021-33046 State: PUBLISHED Published: 2022-01-13T20:27:13 Last Updated: 2024-08-03T23:42:19.550Z Vendors: n/a Products: Access control vulnerability found in some Dahua products Problem Types: Access control Description: Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/957 - https://www.dahuasecurity.com/support/cybersecurity/details/987 - https://support.dahuatech.com/networkSecurity/securityDetails?id=95
CVE ID: CVE-2021-33054 State: PUBLISHED Published: 2021-06-04T14:40:15 Last Updated: 2024-08-03T23:42:19.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.) Additional Analyst Notes: - CVE Program Container: References: - https://www.sogo.nu/news.html - https://github.com/inverse-inc/sogo/blob/master/CHANGELOG.md - https://blogs.akamai.com/2021/06/sogo-and-packetfence-impacted-by-saml-implementation-vulner
/blob/master/CHANGELOG.md - https://blogs.akamai.com/2021/06/sogo-and-packetfence-impacted-by-saml-implementation-vulnerabilities.html - https://lists.debian.org/debian-lts-announce/2021/07/msg00007.html - https://www.debian.org/security/2021/dsa-5029
CVE ID: CVE-2021-33055 State: PUBLISHED Published: 2021-08-30T18:12:17 Last Updated: 2024-08-03T23:42:19.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.stmcyber.com/vulns/cve-2021-33055/ - https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released
CVE ID: CVE-2021-33056 State: PUBLISHED Published: 2021-08-12T20:54:37 Last Updated: 2024-08-03T23:42:19.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BelledonneCommunications/belle-sip/commit/116e3eb48fe43ea63eb9f3c4b4b30c48d58d6ff0 - https://github.com/BelledonneCommunications/belle-sip/compare/4.5.15...4.5.20
CVE ID: CVE-2021-33057 State: PUBLISHED Published: 2022-07-26T22:36:59 Last Updated: 2024-08-03T23:42:19.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the center of the map to the device's location, and use MapContext.getCenterLocation to get the latitude and longitude of the current map center. Additional Analyst Notes: - CVE Program Container: References: - https://tencent.com - htt
de of the current map center. Additional Analyst Notes: - CVE Program Container: References: - https://tencent.com - https://arxiv.org/pdf/2205.15202.pdf - https://github.com/BESTICSP/Vulnerabilities-Related-to-Mini-Programs-Permissions/blob/main/QQ%20applet%20location%20permission%20vulnerability%20report.pdf
CVE ID: CVE-2021-33058 State: PUBLISHED Published: 2021-11-17T19:11:16 Last Updated: 2024-08-03T23:42:19.142Z Vendors: n/a Products: version Problem Types: escalation of privilege Description: Improper access control in the installer Intel(R)Administrative Tools for Intel(R) Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html - https://security.netapp.com/advisory/ntap-20211210-0005/
CVE ID: CVE-2021-33059 State: PUBLISHED Published: 2021-11-17T19:13:18 Last Updated: 2024-08-03T23:42:19.085Z Vendors: n/a Products: Intel(R) Administrative Tools for Intel(R) Network Adapters Problem Types: escalation of privilege Description: Improper input validation in the Intel(R) Administrative Tools for Intel(R) Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html - https://security.netapp.com/advisory/ntap-20211210-0005/
CVE ID: CVE-2021-33060 State: PUBLISHED Published: 2022-08-18T19:58:06.000Z Last Updated: 2025-05-05T16:52:53.694Z Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege Description: Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00686.html - https://security.netapp.com/advisory/ntap-20220930-0004/
CVE ID: CVE-2021-33061 State: PUBLISHED Published: 2022-02-09T22:04:34.000Z Last Updated: 2025-05-05T16:52:43.248Z Vendors: n/a Products: Intel(R) 82599 Ethernet Controllers and Adapters Problem Types: denial of service Description: Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00571.html - https://security.netapp.com/advisory/ntap-20220210-0010/
CVE ID: CVE-2021-33062 State: PUBLISHED Published: 2021-11-17T19:10:23 Last Updated: 2024-08-03T23:42:19.588Z Vendors: n/a Products: Intel(R) VTune(TM) Profiler Problem Types: escalation of privilege Description: Incorrect default permissions in the software installer for the Intel(R) VTune(TM) Profiler before version 2021.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00556.html
CVE ID: CVE-2021-33063 State: PUBLISHED Published: 2021-11-17T19:09:02 Last Updated: 2024-08-03T23:42:19.072Z Vendors: n/a Products: Intel(R) RealSense(TM) D400 Series UWP driver for Windows 10 Problem Types: escalation of privilege Description: Uncontrolled search path in the Intel(R) RealSense(TM) D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00557.html
CVE ID: CVE-2021-33064 State: PUBLISHED Published: 2022-11-11T15:49:15.307Z Last Updated: 2025-01-29T20:44:07.515Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) System Studio Problem Types: escalation of privilege Description: Uncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00558.html
CVE ID: CVE-2021-33065 State: REJECTED Published: N/A Last Updated: 2023-05-16T00:00:00 Description: No description available.
CVE ID: CVE-2021-33066 State: REJECTED Published: N/A Last Updated: 2023-05-16T00:00:00 Description: No description available.
CVE ID: CVE-2021-33067 State: REJECTED Published: N/A Last Updated: 2023-05-16T00:00:00 Description: No description available.
CVE ID: CVE-2021-33068 State: PUBLISHED Published: 2022-02-09T22:04:31.000Z Last Updated: 2025-05-05T16:52:32.913Z Vendors: n/a Products: Intel(R) AMT Problem Types: denial of service Description: Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00470.html - https://security.netapp.com/advisory/ntap-20220210-0006/
CVE ID: CVE-2021-33069 State: PUBLISHED Published: 2022-05-12T16:35:59 Last Updated: 2024-08-03T23:42:19.531Z Vendors: n/a Products: Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Problem Types: denial of service Description: Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html - https://www.solidigm.com/content/dam/solidigm/en/sit
om/content/www/us/en/security-center/advisory/intel-sa-00563.html - https://www.solidigm.com/content/dam/solidigm/en/site/support/support-community/cve-(security)/documents/public-security-advisory.pdf
CVE ID: CVE-2021-33070 State: REJECTED Published: N/A Last Updated: 2023-05-16T00:00:00 Description: No description available.
CVE ID: CVE-2021-33071 State: PUBLISHED Published: 2021-11-17T19:03:56 Last Updated: 2024-08-03T23:42:19.207Z Vendors: n/a Products: Intel(R) oneAPI Rendering Toolkit Problem Types: escalation of privilege Description: Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00564.html
CVE ID: CVE-2021-33072 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:02.786Z Description: No description available.
CVE ID: CVE-2021-33073 State: PUBLISHED Published: 2021-11-17T19:22:19 Last Updated: 2024-08-03T23:42:19.411Z Vendors: n/a Products: Intel(R) Distribution of OpenVINOâ„¢ Toolkit Problem Types: denial of service Description: Uncontrolled resource consumption in the Intel(R) Distribution of OpenVINOâ„¢ Toolkit before version 2021.4 may allow an unauthenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00538.html
CVE ID: CVE-2021-33074 State: PUBLISHED Published: 2022-05-12T16:35:58.000Z Last Updated: 2025-05-05T16:52:24.225Z Vendors: n/a Products: Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products Problem Types: information disclosure Description: Protection mechanism failure in firmware for some Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html - https://www.solidigm.com/content/dam/newco-aem-sit
.com/content/www/us/en/security-center/advisory/intel-sa-00563.html - https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf
CVE ID: CVE-2021-33075 State: PUBLISHED Published: 2022-05-12T16:35:59.000Z Last Updated: 2025-05-05T16:52:15.889Z Vendors: n/a Products: Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products Problem Types: denial of service Description: Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html - https://www.solidigm.com/content/dam/newco-aem-site/mas
content/www/us/en/security-center/advisory/intel-sa-00563.html - https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf
CVE ID: CVE-2021-33076 State: PUBLISHED Published: 2022-09-20T14:24:46.000Z Last Updated: 2025-02-05T20:55:09.872Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Intel(R) SSD DC Problem Types: information disclosure Description: Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf
CVE ID: CVE-2021-33077 State: PUBLISHED Published: 2022-05-12T16:35:56.000Z Last Updated: 2025-05-05T16:52:05.619Z Vendors: n/a Products: Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products Problem Types: escalation of privilege Description: Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE ID: CVE-2021-33078 State: PUBLISHED Published: 2022-05-12T16:35:55.000Z Last Updated: 2025-05-05T16:51:55.829Z Vendors: n/a Products: Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products Problem Types: denial of service Description: Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html - https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20
ry/intel-sa-00563.html - https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf
CVE ID: CVE-2021-33079 State: PUBLISHED Published: 2022-09-20T14:24:43.000Z Last Updated: 2025-02-05T20:55:17.157Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) SSD DC Problem Types: information disclosure Description: Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf