alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-46762 (published 2023-05-09)
Insufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially leading to a loss of
integrity or denial of service.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7352, epyc_7352_firmware, epyc_7373x
CVE-2021-46763 (published 2023-05-09)
Insufficient input validation in the SMU may
enable a privileged attacker to write beyond the intended bounds of a shared
memory buffer potentially leading to a loss of integrity.








Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-787
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7352, epyc_7352_firmware, epyc_7373x
CVE-2021-46764 (published 2023-05-09)
Improper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory locations within the ASP
potentially resulting in a denial of service.












Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7352, epyc_7352_firmware, epyc_7373x
CVE-2021-46765 (published 2023-05-09)
Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.





Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: amd
Affected products: ryzen_3100, ryzen_3100_firmware, ryzen_3300x, ryzen_3300x_firmware, ryzen_3500, ryzen_3500_firmware, ryzen_3500x, ryzen_3500x_firmware, ryzen_3600, ryzen_3600_firmware, ryzen_3600x, ryzen_3600x_firmware, ryzen_3600xt, ryzen_3600xt_firmware, ryzen_3800x, ryzen_3800x_firmware, ryzen_3800xt, ryzen_3800xt_firmware, ryzen_3900, ryzen_3900_firmware, ryzen_3900x, ryzen_3900x_firmware, ryzen_3900xt, ryzen_3900xt_firmware, ryzen_3950x
CVE-2021-46766 (published 2023-11-14)
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-459
Affected vendors: amd
Affected products: epyc_9124, epyc_9124_firmware, epyc_9174f, epyc_9174f_firmware, epyc_9184x, epyc_9184x_firmware, epyc_9224, epyc_9224_firmware, epyc_9254, epyc_9254_firmware, epyc_9274f, epyc_9274f_firmware, epyc_9334, epyc_9334_firmware, epyc_9354, epyc_9354_firmware, epyc_9354p, epyc_9354p_firmware, epyc_9374f, epyc_9374f_firmware, epyc_9384x, epyc_9384x_firmware, epyc_9454, epyc_9454_firmware, epyc_9454p
CVE-2021-46767 (published 2023-01-11)
Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: milanpi, milanpi_firmware, romepi, romepi_firmware
CVE-2021-46768 (published 2023-01-11)
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: amd
Affected products: milanpi, milanpi_firmware, romepi, romepi_firmware
CVE-2021-46769 (published 2023-05-09)
Insufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to execute arbitrary DMA copies,
which can lead to code execution. 
















Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7352, epyc_7352_firmware, epyc_7373x
CVE-2021-46771 (published 2022-05-10)
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_72f3, epyc_72f3_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p, epyc_7443p_firmware, epyc_7453, epyc_7453_firmware, epyc_7473x, epyc_7473x_firmware, epyc_74f3, epyc_74f3_firmware, epyc_7513
CVE-2021-46772 (published 2024-08-13)
Insufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS menu or UEFI shell to tamper with the
structure headers in SPI ROM causing an out of bounds memory read and write,
potentially resulting in memory corruption or denial of service.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L)
Weakness: CWE-125
CVE-2021-46773 (published 2023-05-09)
Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.





Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: ryzen_1200_\(af\), ryzen_1200_\(af\)_firmware, ryzen_1600_\(af\), ryzen_1600_\(af\)_firmware, ryzen_2200g, ryzen_2200g_firmware, ryzen_2200ge, ryzen_2200ge_firmware, ryzen_2300x, ryzen_2300x_firmware, ryzen_2400g, ryzen_2400g_firmware, ryzen_2400ge, ryzen_2400ge_firmware, ryzen_2500x, ryzen_2500x_firmware, ryzen_2600, ryzen_2600_firmware, ryzen_2600e, ryzen_2600e_firmware, ryzen_2600x, ryzen_2600x_firmware, ryzen_2700, ryzen_2700_firmware, ryzen_2700e
CVE-2021-46774 (published 2023-11-14)
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301
CVE-2021-46775 (published 2023-05-09)
Improper input validation in ABL may enable an
attacker with physical access, to perform arbitrary memory overwrites,
potentially leading to a loss of integrity and code execution.



 
















Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7352, epyc_7352_firmware, epyc_7373x
CVE-2021-46778 (published 2022-08-10)
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: amd
Affected products: athlon_3050ge, athlon_3050ge_firmware, athlon_3150g, athlon_3150g_firmware, athlon_3150ge, athlon_3150ge_firmware, epyc_7001, epyc_7001_firmware, epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281
CVE-2021-46779 (published 2023-01-11)
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: milanpi, milanpi_firmware, naplespi, naplespi_firmware, romepi, romepi_firmware
CVE-2021-46780 (published 2022-04-25)
The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: supsystic
Affected products: easy_google_maps
CVE-2021-46781 (published 2022-04-25)
The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: subsystic
Affected products: coming_soon
CVE-2021-46782 (published 2022-04-25)
The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: supsystic
Affected products: price_table
CVE-2021-46784 (published 2022-07-17)
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: debian, squid-cache
Affected products: debian_linux, squid
CVE-2021-46785 (published 2022-05-13)
The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46786 (published 2022-05-13)
The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2021-46787 (published 2022-05-13)
The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2021-46788 (published 2022-05-13)
Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: huawei
Affected products: emui, magic_ui
CVE-2021-46789 (published 2022-05-13)
Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, magic_ui
CVE-2021-46790 (published 2022-05-02)
ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: debian, fedoraproject, tuxera
Affected products: debian_linux, fedora, ntfs-3g
CVE-2021-46791 (published 2023-01-11)
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: milanpi, milanpi_firmware
CVE-2021-46792 (published 2023-05-09)
Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.





Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-367
Affected vendors: amd
Affected products: athlon_gold_3150g, athlon_gold_3150g_firmware, athlon_gold_3150ge, athlon_gold_3150ge_firmware, athlon_silver_3050ge, athlon_silver_3050ge_firmware, ryzen_1200_\(af\), ryzen_1200_\(af\)_firmware, ryzen_1600_\(af\), ryzen_1600_\(af\)_firmware, ryzen_2200g, ryzen_2200g_firmware, ryzen_2200ge, ryzen_2200ge_firmware, ryzen_2300x, ryzen_2300x_firmware, ryzen_2400g, ryzen_2400g_firmware, ryzen_2400ge, ryzen_2400ge_firmware, ryzen_2500x, ryzen_2500x_firmware, ryzen_2600, ryzen_2600_firmware, ryzen_2600e
CVE-2021-46794 (published 2023-05-09)
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.





Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: amd
Affected products: athlon_gold_3150g, athlon_gold_3150g_firmware, athlon_gold_3150ge, athlon_gold_3150ge_firmware, athlon_silver_3050ge, athlon_silver_3050ge_firmware, ryzen_1200_\(af\), ryzen_1200_\(af\)_firmware, ryzen_1600_\(af\), ryzen_1600_\(af\)_firmware, ryzen_2200g, ryzen_2200g_firmware, ryzen_2200ge, ryzen_2200ge_firmware, ryzen_2300x, ryzen_2300x_firmware, ryzen_2400g, ryzen_2400g_firmware, ryzen_2400ge, ryzen_2400ge_firmware, ryzen_2500x, ryzen_2500x_firmware, ryzen_2600, ryzen_2600_firmware, ryzen_2600e
CVE-2021-46795 (published 2023-01-11)
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-367
Affected vendors: amd
Affected products: cezannepi-fp6, cezannepi-fp6_firmware, comboam4v2_pi, comboam4v2_pi_firmware, renoirpi-fp6_firmware
CVE-2021-46811 (published 2022-06-13)
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-276
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2021-46812 (published 2022-06-13)
The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46813 (published 2022-06-13)
Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-212
Affected vendors: huawei
Affected products: emui, magic_ui
CVE-2021-46814 (published 2022-06-13)
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2021-46816 (published 2022-06-13)
Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, microsoft
Affected products: macos, premiere_pro, windows
CVE-2021-46817 (published 2022-06-13)
Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, microsoft
Affected products: macos, media_encoder, windows
CVE-2021-46818 (published 2022-06-13)
Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, microsoft
Affected products: macos, media_encoder, windows
CVE-2021-46820 (published 2022-06-16)
Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.php
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-862
Affected vendors: xos-shop
Affected products: xos_shop_system
CVE-2021-46822 (published 2022-06-18)
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: libjpeg-turbo
Affected products: libjpeg-turbo
CVE-2021-46823 (published 2022-06-18)
python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-1333
Affected vendors: python-ldap
Affected products: python-ldap
CVE-2021-46824 (published 2022-06-23)
Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in student_profile.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: school_file_management_system_project
Affected products: school_file_management_system
CVE-2021-46825 (published 2022-07-07)
Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web server responses to unintended clients. Severity/CVSSv3: High / 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-444
Affected vendors: broadcom
Affected products: advanced_secure_gateway, proxysg
CVE-2021-46827 (published 2022-07-13)
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: sync
Affected products: oxygen_publishing_engine, oxygen_xml_author, oxygen_xml_developer, oxygen_xml_editor, oxygen_xml_webhelp
CVE-2021-46828 (published 2022-07-20)
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: debian, libtirpc_project
Affected products: debian_linux, libtirpc
CVE-2021-46829 (published 2022-07-24)
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: debian, fedoraproject, gnome
Affected products: debian_linux, fedora, gdk-pixbuf
CVE-2021-46830 (published 2022-07-27)
A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a higher directory level than intended.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: helpsystems
Affected products: goanywhere_managed_file_transfer
CVE-2021-46834 (published 2022-09-20)
A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225(C00E220R3P4).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-276
Affected vendors: huawei
Affected products: jad-al50, jad-al50_firmware
CVE-2021-46835 (published 2022-09-20)
There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-294
Affected vendors: huawei
Affected products: ws7200-10, ws7200-10_firmware
CVE-2021-46836 (published 2022-09-16)
Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46837 (published 2022-08-30)
res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a T.38 re-invite initiated by Asterisk. This is a re-occurrence of the CVE-2019-15297 symptoms but not for exactly the same reason. The crash occurs because there is an append operation relative to the active topology, but this should instead be a replace operation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: asterisk, debian, digium
Affected products: asterisk, certified_asterisk, debian_linux
CVE-2021-46839 (published 2022-10-14)
The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-125
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46840 (published 2022-10-14)
The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-125
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46841 (published 2023-02-27)
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: apple
Affected products: music
CVE-2021-46846 (published 2022-12-12)
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.


Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp, hpe
Affected products: 3par_service_processor, apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_r2000_chassis, integrated_lights-out_5, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_server, proliant_dl360_gen10_server, proliant_dl380_gen10_server, proliant_dl385_gen10_plus_server, proliant_dl385_gen10_server, proliant_dl560_gen10_server, proliant_dl580_gen10_server, proliant_dx385_gen10_plus_server, proliant_e910_server_blade, proliant_e910t_server_blade, proliant_m750_server_blade
CVE-2021-46848 (published 2022-10-24)
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-193
Affected vendors: debian, fedoraproject, gnu
Affected products: debian_linux, fedora, libtasn1
CVE-2021-46850 (published 2022-10-24)
myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrative user can execute arbitrary commands via the v_sftp_license parameter when sending HTTP POST requests to the /edit/server endpoint.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-88
Affected vendors: vestacp
Affected products: control_panel, vesta_control_panel
CVE-2021-46851 (published 2022-11-09)
The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46852 (published 2022-11-09)
The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-306
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46853 (published 2022-11-03)
Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-367
Affected vendors: alpine_project
Affected products: alpine
CVE-2021-46854 (published 2022-11-23)
mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-401
Affected vendors: proftpd
Affected products: proftpd
CVE-2021-46856 (published 2022-12-20)
The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46867 (published 2023-01-06)
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46868 (published 2023-01-06)
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46871 (published 2023-01-10)
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: phoenixframework
Affected products: phoenix_html
CVE-2021-46872 (published 2023-01-13)
An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.)
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: nim-lang
Affected products: nim, nimforum
CVE-2021-46873 (published 2023-01-29)
WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently useless.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-362
Affected vendors: microsoft, wireguard
Affected products: windows, wireguard
CVE-2021-46875 (published 2023-03-12)
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: ibexa
Affected products: ez_platform_kernel
CVE-2021-46876 (published 2023-03-12)
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-203
Affected vendors: ibexa
Affected products: ez_platform_kernel
CVE-2021-46877 (published 2023-03-18)
jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: fasterxml
Affected products: jackson-databind
CVE-2021-46878 (published 2023-04-11)
An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file and trick the victim opening it using the affect software, triggering use-after-free and execute arbitrary code on the target system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-843
Affected vendors: treasuredata
Affected products: fluent_bit
CVE-2021-46879 (published 2023-04-11)
An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flb_msgpack_gelf_value_ext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute arbitrary code on the target system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: treasuredata
Affected products: fluent_bit
CVE-2021-46880 (published 2023-04-15)
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-295
Affected vendors: openbsd
Affected products: libressl, openbsd
CVE-2021-46881 (published 2023-05-26)
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: huawei
Affected products: emui
CVE-2021-46882 (published 2023-05-26)
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: huawei
Affected products: emui
CVE-2021-46883 (published 2023-05-26)
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: huawei
Affected products: emui
CVE-2021-46884 (published 2023-05-26)
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: huawei
Affected products: emui
CVE-2021-46885 (published 2023-05-26)
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: huawei
Affected products: emui
CVE-2021-46886 (published 2023-05-26)
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: huawei
Affected products: emui
CVE-2021-46887 (published 2023-05-26)
Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: huawei
Affected products: emui
CVE-2021-46888 (published 2023-05-21)
An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting (XSS) vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hledger
Affected products: hledger
CVE-2021-46889 (published 2023-06-07)
The 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for bwg_frontend_data. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-31693.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: 10web
Affected products: photo_gallery
CVE-2021-46890 (published 2023-07-05)
Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46891 (published 2023-07-05)
Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-200
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46892 (published 2023-07-06)
Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-701
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46893 (published 2023-07-05)
Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-1284
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46894 (published 2023-07-06)
Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46895 (published 2023-08-13)
Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-701
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2021-46896 (published 2023-07-06)
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: dronecode
Affected products: px4_drone_autopilot
CVE-2021-46897 (published 2023-10-22)
views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: wagtailcrx
Affected products: codered_extensions
CVE-2021-46898 (published 2023-10-22)
views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith("/") but this does not consider a protocol-relative URL (e.g., //example.com) attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: vonautomatisch
Affected products: django_grappelli
CVE-2021-46899 (published 2023-12-09)
SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework) remote debugging, allowing a local attacker to control the application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: antonymale
Affected products: synctrayzor
CVE-2021-46900 (published 2023-12-31)
Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: sympa
Affected products: sympa
CVE-2021-46901 (published 2023-12-31)
examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a request for a long URL over a 6LoWPAN network.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: cetic
Affected products: cetic-6lbr
CVE-2021-46902 (published 2024-02-04)
An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. Path validation is mishandled, and thus an admin can read or delete files in violation of expected access controls.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: meinbergglobal
Affected products: lantime_firmware
CVE-2021-46903 (published 2024-02-04)
An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. An admin can delete required user accounts (in violation of expected access control).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-284
Affected vendors: meinbergglobal
Affected products: lantime_firmware
CVE-2021-46904 (published 2024-02-26)
In the Linux kernel, the following vulnerability has been resolved:

net: hso: fix null-ptr-deref during tty device unregistration

Multiple ttys try to claim the same the minor number causing a double
unregistration of the same device. The first unregistration succeeds
but the next one results in a null-ptr-deref.

The get_free_serial_index() function returns an available minor number
but doesn't assign it immediately. The assignment is done by the caller
later. But before this assignment, calls to get_free_serial_index()
would return the same minor number.

Fix this by modifying get_free_serial_index to assign the minor number
immediately after one is found to be and rename it to obtain_minor()
to better reflect what it does. Similary, rename set_serial_by_index()
to release_minor() and modify it to free up the minor number of the
given hso_serial. Every obtain_minor() should have corresponding
release_minor() call.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: linux
Affected products: linux_kernel
CVE-2021-46905 (published 2024-02-26)
In the Linux kernel, the following vulnerability has been resolved:

net: hso: fix NULL-deref on disconnect regression

Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device
unregistration") fixed the racy minor allocation reported by syzbot, but
introduced an unconditional NULL-pointer dereference on every disconnect
instead.

Specifically, the serial device table must no longer be accessed after
the minor has been released by hso_serial_tty_unregister().
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: linux
Affected products: linux_kernel
CVE-2021-46906 (published 2024-02-26)
In the Linux kernel, the following vulnerability has been resolved:

HID: usbhid: fix info leak in hid_submit_ctrl

In hid_submit_ctrl(), the way of calculating the report length doesn't
take into account that report->size can be zero. When running the
syzkaller reproducer, a report of size 0 causes hid_submit_ctrl) to
calculate transfer_buffer_length as 16384. When this urb is passed to
the usb core layer, KMSAN reports an info leak of 16384 bytes.

To fix this, first modify hid_report_len() to account for the zero
report size case by using DIV_ROUND_UP for the division. Then, call it
from hid_submit_ctrl().
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-668
Affected vendors: linux
Affected products: linux_kernel
CVE-2021-46908 (published 2024-02-27)
In the Linux kernel, the following vulnerability has been resolved:

bpf: Use correct permission flag for mixed signed bounds arithmetic

We forbid adding unknown scalars with mixed signed bounds due to the
spectre v1 masking mitigation. Hence this also needs bypass_spec_v1
flag instead of allow_ptr_leaks.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: linux
Affected products: linux_kernel
CVE-2021-46909 (published 2024-02-27)
In the Linux kernel, the following vulnerability has been resolved:

ARM: footbridge: fix PCI interrupt mapping

Since commit 30fdfb929e82 ("PCI: Add a call to pci_assign_irq() in
pci_device_probe()"), the PCI code will call the IRQ mapping function
whenever a PCI driver is probed. If these are marked as __init, this
causes an oops if a PCI driver is loaded or bound after the kernel has
initialised.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: linux
Affected products: linux_kernel