alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-29079 (published 2021-03-23)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: netgear
Affected products: rbk852, rbk852_firmware, rbk853, rbk853_firmware, rbk854, rbk854_firmware, rbr850, rbr850_firmware, rbs850, rbs850_firmware
CVE-2021-29080 (published 2021-03-23)
Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, R7000 before 1.0.11.116, R6900P before 1.3.2.126, R7900 before 1.0.4.38, R7960P before 1.4.1.66, R8000 before 1.0.4.66, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and R7000P before 1.3.2.126.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-640
Affected vendors: netgear
Affected products: cbr40, cbr40_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p, r7000p_firmware, r7900, r7900_firmware, r7900p, r7900p_firmware, r7960p, r7960p_firmware, r8000, r8000_firmware, r8000p, r8000p_firmware, rax75, rax75_firmware, rax80, rax80_firmware, rbk852, rbk852_firmware, rbk853
CVE-2021-29081 (published 2021-03-23)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: rbk752, rbk752_firmware, rbk753, rbk753_firmware, rbk753s, rbk753s_firmware, rbk754, rbk754_firmware, rbk852, rbk852_firmware, rbk853, rbk853_firmware, rbk854, rbk854_firmware, rbr750, rbr750_firmware, rbr850, rbr850_firmware, rbs750, rbs750_firmware, rbs850, rbs850_firmware, rbw30, rbw30_firmware
CVE-2021-29082 (published 2021-03-23)
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBK754 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBK854 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L)
Affected vendors: netgear
Affected products: rbk752, rbk752_firmware, rbk753, rbk753_firmware, rbk753s, rbk753s_firmware, rbk754, rbk754_firmware, rbk852, rbk852_firmware, rbk853, rbk853_firmware, rbk854, rbk854_firmware, rbr750, rbr750_firmware, rbr850, rbr850_firmware, rbs40v, rbs40v_firmware, rbs750, rbs750_firmware, rbs850, rbs850_firmware, rbw30
CVE-2021-29083 (published 2021-04-01)
Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute arbitrary code via realname parameter.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: synology
Affected products: diskstation_manager
CVE-2021-29084 (published 2021-06-23)
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-74
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller
CVE-2021-29085 (published 2021-06-23)
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-74
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller
CVE-2021-29086 (published 2021-06-23)
Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to obtain sensitive information via unspecified vectors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller
CVE-2021-29087 (published 2021-06-23)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller
CVE-2021-29088 (published 2021-06-01)
Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: synology
Affected products: diskstation_manager
CVE-2021-29089 (published 2021-06-02)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: synology
Affected products: photo_station
CVE-2021-29090 (published 2021-06-02)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: synology
Affected products: photo_station
CVE-2021-29091 (published 2021-06-02)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: synology
Affected products: photo_station
CVE-2021-29092 (published 2021-06-01)
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: synology
Affected products: photo_station
CVE-2021-29093 (published 2021-03-25)
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29094 (published 2021-03-25)
Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29095 (published 2021-03-25)
Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29096 (published 2021-03-25)
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: esri
Affected products: arcgis_engine, arcgis_pro, arcmap, arcreader
CVE-2021-29097 (published 2021-03-25)
Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: esri
Affected products: arcgis_engine, arcgis_pro, arcmap, arcreader
CVE-2021-29098 (published 2021-03-25)
Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: esri
Affected products: arcgis_engine, arcgis_pro, arcmap, arcreader
CVE-2021-29099 (published 2021-06-07)
A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. Specially crafted web requests can expose information that is not intended to be disclosed (not customer datasets). Web Services that use file based data sources (file Geodatabase or Shape Files or tile cached services) are unaffected by this issue.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-89
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29100 (published 2021-05-05)
A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS Earth by inducing the user to upload a crafted file to an affected system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-23
Affected vendors: esri
Affected products: arcgis_earth
CVE-2021-29101 (published 2021-05-05)
ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-23
Affected vendors: esri
Affected products: arcgis_geoevent_server
CVE-2021-29102 (published 2021-07-11)
A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-918
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29103 (published 2021-07-11)
A reflected Cross Site Scripting (XXS) vulnerability in ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29104 (published 2021-07-11)
A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29105 (published 2021-07-11)
A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below may allow a remote authenticated attacker to pass and store malicious strings in the ArcGIS Services Directory.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29106 (published 2021-07-10)
A reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29107 (published 2021-07-10)
A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29108 (published 2021-10-01)
There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account (XML Signature Wrapping Attack). In addition patching, Esri also strongly recommends as best practice for SAML assertions to be signed and encrypted.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: esri
Affected products: portal_for_arcgis
CVE-2021-29109 (published 2021-10-01)
A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: portal_for_arcgis
CVE-2021-29110 (published 2021-10-01)
Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: portal_for_arcgis
CVE-2021-29112 (published 2022-08-12)
An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: esri
Affected products: arcreader
CVE-2021-29113 (published 2021-12-07)
A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)
Weakness: CWE-98
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29114 (published 2021-12-07)
A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via specifically crafted queries.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29115 (published 2021-12-07)
An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose features.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: esri
Affected products: arcgis_enterprise
CVE-2021-29116 (published 2021-12-07)
A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: esri
Affected products: arcgis_server
CVE-2021-29117 (published 2022-08-12)
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: esri
Affected products: arcreader
CVE-2021-29118 (published 2022-08-12)
An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: esri
Affected products: arcreader
CVE-2021-29133 (published 2021-03-24)
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: haserl_project
Affected products: haserl
CVE-2021-29134 (published 2022-03-15)
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-22
Affected vendors: gitea
Affected products: gitea
CVE-2021-29136 (published 2021-04-06)
Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: linuxfoundation, sylabs
Affected products: singularity, umoci
CVE-2021-29137 (published 2021-04-29)
A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: arubanetworks
Affected products: airwave
CVE-2021-29138 (published 2021-04-29)
A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29139 (published 2021-04-29)
A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29140 (published 2021-04-29)
A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)
Weakness: CWE-611
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29141 (published 2021-04-29)
A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29142 (published 2021-04-29)
A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29143 (published 2021-07-22)
A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: arubanetworks
Affected products: aos-cx_firmware, cx_6200f, cx_6300, cx_6400, cx_8320, cx_8325, cx_8360, cx_8400
CVE-2021-29144 (published 2021-04-29)
A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29145 (published 2021-04-29)
A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-918
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29146 (published 2021-04-29)
A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29147 (published 2021-04-29)
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: arubanetworks
Affected products: clearpass
CVE-2021-29148 (published 2021-07-22)
A local cross-site scripting (XSS) vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: arubanetworks
Affected products: aos-cx_firmware, cx_6200f, cx_6300, cx_6400, cx_8320, cx_8325, cx_8360, cx_8400
CVE-2021-29149 (published 2021-07-22)
A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: arubanetworks
Affected products: aos-cx_firmware, cx_6200f, cx_6300, cx_6400, cx_8320, cx_8325, cx_8360, cx_8400
CVE-2021-29150 (published 2021-07-08)
A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: arubanetworks
Affected products: clearpass_policy_manager
CVE-2021-29151 (published 2021-07-08)
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: arubanetworks
Affected products: clearpass_policy_manager
CVE-2021-29152 (published 2021-07-08)
A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: arubanetworks
Affected products: clearpass_policy_manager
CVE-2021-29154 (published 2021-04-08)
BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: debian, fedoraproject, linux, netapp
Affected products: cloud_backup, debian_linux, fedora, h300e, h300e_firmware, h300s, h300s_firmware, h410s, h410s_firmware, h500e, h500e_firmware, h500s, h500s_firmware, h700e, h700e_firmware, h700s, h700s_firmware, hci_management_node, linux_kernel, solidfire
CVE-2021-29155 (published 2021-04-20)
An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: debian, fedoraproject, linux
Affected products: debian_linux, fedora, linux_kernel
CVE-2021-29156 (published 2021-03-25)
ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-74
Affected vendors: forgerock
Affected products: openam
CVE-2021-29157 (published 2021-06-28)
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: dovecot, fedoraproject
Affected products: dovecot, fedora
CVE-2021-29158 (published 2021-04-23)
Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-863
Affected vendors: sonatype
Affected products: nexus_repository_manager_3
CVE-2021-29159 (published 2021-04-28)
A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: sonatype
Affected products: nexus_repository_manager
CVE-2021-29200 (published 2021-04-27)
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: apache
Affected products: ofbiz
CVE-2021-29201 (published 2021-05-25)
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29202 (published 2021-05-25)
A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29203 (published 2021-05-06)
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edgeline Infrastructure Manager.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: hp
Affected products: edgeline_infrastructure_manager
CVE-2021-29204 (published 2021-05-25)
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29205 (published 2021-05-25)
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29206 (published 2021-05-25)
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29207 (published 2021-05-25)
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29208 (published 2021-05-25)
A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-74
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29209 (published 2021-05-25)
A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-74
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29210 (published 2021-05-25)
A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-74
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29211 (published 2021-05-25)
A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp
Affected products: integrated_lights-out_4, integrated_lights-out_5, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_ml110_gen10_server, proliant_ml30_gen10_server, proliant_ml350_gen10_server, proliant_xl170r_gen10_server, proliant_xl190r_gen10_server, proliant_xl230k_gen10_server, proliant_xl270d_gen10_server, proliant_xl450_gen10_server, simplivity_2600, simplivity_325
CVE-2021-29212 (published 2021-11-01)
A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: hp
Affected products: ilo_amplifier_pack
CVE-2021-29213 (published 2021-11-01)
A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitive information, denial of service (DoS), and/or compromise system integrity.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: proliant_dl20_gen10_server, proliant_dl20_gen10_server_firmware, proliant_microserver_gen10_plus, proliant_microserver_gen10_plus_firmware, proliant_ml30_gen10_server, proliant_ml30_gen10_server_firmware
CVE-2021-29214 (published 2021-12-10)
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: storeserv_management_console
CVE-2021-29215 (published 2022-01-18)
A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in version(s): Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to Tez-0.9.2: mapr-tez-0.9.2.0.201907081043-1.noarch. HPE has provided software updates to resolve the vulnerability in the TEZ MapR ecosystem component in HPE Ezmeral Data Fabric.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: ezmeral_data_fabric, tez
CVE-2021-29216 (published 2022-02-24)
A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hpe
Affected products: oneview_global_dashboard
CVE-2021-29217 (published 2022-02-24)
A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: hpe
Affected products: oneview_global_dashboard