alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-36283 (published 2021-09-28)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: dell
Affected products: chengming_3990, chengming_3990_firmware, chengming_3991, chengming_3991_firmware, g3_15_3500, g3_15_3500_firmware, g3_15_3590, g3_15_3590_firmware, g3_15_5500, g3_15_5500_firmware, inspiron_3493, inspiron_3493_firmware, inspiron_3501, inspiron_3501_firmware, inspiron_3593, inspiron_3593_firmware, inspiron_3793, inspiron_3793_firmware, inspiron_3880, inspiron_3880_firmware, inspiron_3881, inspiron_3881_firmware, inspiron_5400_2-in-1, inspiron_5400_2-in-1_firmware, inspiron_5490
CVE-2021-36284 (published 2021-09-28)
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-307
Affected vendors: dell
Affected products: latitude_5310_2-in-1, latitude_5310_2-in-1_firmware, latitude_5320, latitude_5320_firmware, latitude_5400, latitude_5400_firmware, latitude_5411, latitude_5411_firmware, latitude_5500, latitude_5500_firmware, latitude_5511, latitude_5511_firmware, latitude_5520, latitude_5520_firmware, latitude_7212_rugged_extreme_tablet, latitude_7212_rugged_extreme_tablet_firmware, latitude_7280, latitude_7280_firmware, latitude_7320, latitude_7320_firmware, latitude_7370, latitude_7370_firmware, latitude_7420, latitude_7420_firmware, latitude_7480
CVE-2021-36285 (published 2021-09-28)
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-307
Affected vendors: dell
Affected products: latitude_5310_2-in-1, latitude_5310_2-in-1_firmware, latitude_5320, latitude_5320_firmware, latitude_5400, latitude_5400_firmware, latitude_5411, latitude_5411_firmware, latitude_5500, latitude_5500_firmware, latitude_5511, latitude_5511_firmware, latitude_5520, latitude_5520_firmware, latitude_7212_rugged_extreme_tablet, latitude_7212_rugged_extreme_tablet_firmware, latitude_7280, latitude_7280_firmware, latitude_7320, latitude_7320_firmware, latitude_7370, latitude_7370_firmware, latitude_7420, latitude_7420_firmware, latitude_7480
CVE-2021-36286 (published 2021-09-28)
Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited by using the Windows feature of NTFS called Symbolic links. Symbolic links can be created by any(non-privileged) user under some object directories, but by themselves are not sufficient to successfully escalate privileges. However, combining them with a different object, such as the NTFS junction point allows for the exploitation. Support assist clean files functionality do not distinguish junction points from the physical folder and proceeds to clean the target of the junction that allows nonprivileged users to create junction points and delete arbitrary files on the system which can be accessed only by the admin.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-22
Affected vendors: dell
Affected products: supportassist_client_consumer
CVE-2021-36287 (published 2022-04-08)
Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthenticated users to execute commands on the system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50, vnxe1600
CVE-2021-36288 (published 2022-04-08)
Dell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated users to read/write restricted files
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-22
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50, vnxe1600
CVE-2021-36289 (published 2022-01-25)
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-532
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50
CVE-2021-3629 (published 2022-05-24)
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: netapp, redhat
Affected products: active_iq_unified_manager, enterprise_linux, integration, jboss_enterprise_application_platform, oncommand_insight, oncommand_workflow_automation, single_sign-on, undertow, wildfly_core
CVE-2021-36290 (published 2022-04-08)
Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin may potentially exploit vulnerability and gain privileges.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50, vnxe1600
CVE-2021-36293 (published 2022-04-08)
Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin may potentially exploit vulnerability and gain elevated privileges.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50, vnxe1600
CVE-2021-36294 (published 2022-01-25)
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-331
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50
CVE-2021-36295 (published 2022-01-25)
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50
CVE-2021-36296 (published 2022-01-25)
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dell
Affected products: emc_unity_operating_environment, vnx5200, vnx5400, vnx5600, vnx5800, vnx7600, vnx8000, vnx_vg10, vnx_vg50
CVE-2021-36297 (published 2021-09-28)
SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing arbitrary dll's,
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: dell
Affected products: supportassist_for_home_pcs
CVE-2021-36298 (published 2021-10-01)
Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-327
Affected vendors: dell
Affected products: isilon_insightiq, isilon_insightiq_firmware
CVE-2021-36299 (published 2021-11-23)
Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-89
Affected vendors: dell
Affected products: emc_idrac9_firmware
CVE-2021-3630 (published 2021-06-30)
An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: debian, djvulibre_project, fedoraproject
Affected products: debian_linux, djvulibre, fedora
CVE-2021-36300 (published 2021-11-23)
iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)
Weakness: CWE-89
Affected vendors: dell
Affected products: emc_idrac9_firmware
CVE-2021-36301 (published 2021-11-23)
Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: dell
Affected products: emc_idrac8_firmware, emc_idrac9_firmware
CVE-2021-36302 (published 2022-02-09)
All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take over the system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: dell
Affected products: emc_integrated_system_for_microsoft_azure_stack_hub, emc_integrated_system_for_microsoft_azure_stack_hub_firmware
CVE-2021-36305 (published 2021-11-12)
Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-662
Affected vendors: dell
Affected products: emc_powerscale_onefs
CVE-2021-36306 (published 2021-11-20)
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: dell
Affected products: networking_os10
CVE-2021-36307 (published 2021-11-20)
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: dell
Affected products: networking_os10
CVE-2021-36308 (published 2021-11-20)
Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-288
Affected vendors: dell
Affected products: networking_os10
CVE-2021-36309 (published 2021-10-01)
Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-256
Affected vendors: dell
Affected products: enterprise_sonic_os
CVE-2021-3631 (published 2022-03-02)
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-732
Affected vendors: netapp, redhat
Affected products: enterprise_linux, libvirt, ontap_select_deploy_administration_utility, openshift_container_platform
CVE-2021-36310 (published 2021-11-20)
Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-693
Affected vendors: dell
Affected products: networking_os10
CVE-2021-36311 (published 2021-11-23)
Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execute it.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-285
Affected vendors: dell
Affected products: emc_networker
CVE-2021-36312 (published 2021-11-23)
Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-259
Affected vendors: dell
Affected products: cloudlink
CVE-2021-36313 (published 2021-11-23)
Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. This vulnerability is considered critical as it may be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: dell
Affected products: cloudlink
CVE-2021-36314 (published 2021-11-23)
Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticated attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary files on the end user system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: dell
Affected products: emc_cloud_link
CVE-2021-36315 (published 2021-11-12)
Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: dell
Affected products: emc_powerscale_nodes_a100, emc_powerscale_nodes_a100_firmware, emc_powerscale_nodes_a200, emc_powerscale_nodes_a2000, emc_powerscale_nodes_a2000_firmware, emc_powerscale_nodes_a200_firmware, emc_powerscale_nodes_a300, emc_powerscale_nodes_a3000, emc_powerscale_nodes_a3000_firmware, emc_powerscale_nodes_a300_firmware, emc_powerscale_nodes_f200, emc_powerscale_nodes_f200_firmware, emc_powerscale_nodes_f600, emc_powerscale_nodes_f600_firmware, emc_powerscale_nodes_f800, emc_powerscale_nodes_f800_firmware, emc_powerscale_nodes_f810, emc_powerscale_nodes_f810_firmware, emc_powerscale_nodes_h400, emc_powerscale_nodes_h400_firmware, emc_powerscale_nodes_h500, emc_powerscale_nodes_h500_firmware, emc_powerscale_nodes_h5600, emc_powerscale_nodes_h5600_firmware, emc_powerscale_nodes_h600
CVE-2021-36316 (published 2021-12-21)
Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation on the AUI.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: dell
Affected products: emc_avamar_server
CVE-2021-36317 (published 2021-12-21)
Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-256
Affected vendors: dell
Affected products: emc_avamar_server, emc_powerprotect_data_protection_appliance
CVE-2021-36318 (published 2021-12-21)
Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-532
Affected vendors: dell
Affected products: emc_avamar_server
CVE-2021-36319 (published 2021-11-20)
Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP authentication failure messages.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-665
Affected vendors: dell
Affected products: networking_os10
CVE-2021-3632 (published 2022-08-26)
A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: redhat
Affected products: enterprise_linux, keycloak, single_sign-on
CVE-2021-36320 (published 2021-11-20)
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-331
Affected vendors: dell
Affected products: x1008, x1008_firmware, x1008p, x1008p_firmware, x1018, x1018_firmware, x1018p, x1018p_firmware, x1026, x1026_firmware, x1026p, x1026p_firmware, x1052, x1052_firmware, x1052p, x1052p_firmware, x4012, x4012_firmware
CVE-2021-36321 (published 2021-11-20)
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: dell
Affected products: x1008, x1008_firmware, x1008p, x1008p_firmware, x1018, x1018_firmware, x1018p, x1018p_firmware, x1026, x1026_firmware, x1026p, x1026p_firmware, x1052, x1052_firmware, x1052p, x1052p_firmware, x4012, x4012_firmware
CVE-2021-36322 (published 2021-11-20)
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-20
Affected vendors: dell
Affected products: x1008, x1008_firmware, x1008p, x1008p_firmware, x1018, x1018_firmware, x1018p, x1018p_firmware, x1026, x1026_firmware, x1026p, x1026p_firmware, x1052, x1052_firmware, x1052p, x1052p_firmware, x4012, x4012_firmware
CVE-2021-36323 (published 2021-11-12)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: dell
Affected products: alienware_13_r3, alienware_13_r3_firmware, alienware_15_r3, alienware_15_r3_firmware, alienware_15_r4, alienware_15_r4_firmware, alienware_17_r4, alienware_17_r4_firmware, alienware_17_r5, alienware_17_r5_firmware, alienware_area_51m_r1, alienware_area_51m_r1_firmware, alienware_area_51m_r2, alienware_area_51m_r2_firmware, alienware_aurora_r11, alienware_aurora_r11_firmware, alienware_aurora_r12, alienware_aurora_r12_firmware, alienware_aurora_r7, alienware_aurora_r7_firmware, alienware_aurora_r8, alienware_aurora_r8_firmware, alienware_aurora_r9, alienware_aurora_r9_firmware, alienware_aurora_ryzen_edition
CVE-2021-36324 (published 2021-11-12)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: dell
Affected products: alienware_13_r3, alienware_13_r3_firmware, alienware_15_r3, alienware_15_r3_firmware, alienware_15_r4, alienware_15_r4_firmware, alienware_17_r4, alienware_17_r4_firmware, alienware_17_r5, alienware_17_r5_firmware, alienware_area_51m_r1, alienware_area_51m_r1_firmware, alienware_area_51m_r2, alienware_area_51m_r2_firmware, alienware_aurora_r11, alienware_aurora_r11_firmware, alienware_aurora_r12, alienware_aurora_r12_firmware, alienware_aurora_r7, alienware_aurora_r7_firmware, alienware_aurora_r8, alienware_aurora_r8_firmware, alienware_aurora_r9, alienware_aurora_r9_firmware, alienware_aurora_ryzen_edition
CVE-2021-36325 (published 2021-11-12)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: dell
Affected products: alienware_13_r3, alienware_13_r3_firmware, alienware_15_r3, alienware_15_r3_firmware, alienware_15_r4, alienware_15_r4_firmware, alienware_17_r4, alienware_17_r4_firmware, alienware_17_r5, alienware_17_r5_firmware, alienware_area_51m_r1, alienware_area_51m_r1_firmware, alienware_area_51m_r2, alienware_area_51m_r2_firmware, alienware_aurora_r11, alienware_aurora_r11_firmware, alienware_aurora_r12, alienware_aurora_r12_firmware, alienware_aurora_r7, alienware_aurora_r7_firmware, alienware_aurora_r8, alienware_aurora_r8_firmware, alienware_aurora_r9, alienware_aurora_r9_firmware, alienware_aurora_ryzen_edition
CVE-2021-36326 (published 2021-11-30)
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted format.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-757
Affected vendors: dell
Affected products: emc_streaming_data_platform
CVE-2021-36327 (published 2021-11-30)
Dell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to perform port scanning of internal networks and make HTTP requests to an arbitrary domain of the attacker's choice.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-918
Affected vendors: dell
Affected products: emc_streaming_data_platform
CVE-2021-36328 (published 2021-11-30)
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-598
Affected vendors: dell
Affected products: emc_streaming_data_platform
CVE-2021-36329 (published 2021-11-30)
Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-639
Affected vendors: dell
Affected products: emc_streaming_data_platform
CVE-2021-3633 (published 2021-08-17)
A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: lenovo
Affected products: drivers_management
CVE-2021-36330 (published 2021-11-30)
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-613
Affected vendors: dell
Affected products: emc_streaming_data_platform
CVE-2021-36332 (published 2021-11-23)
Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, directing end user to arbitrary and potentially malicious websites.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: dell
Affected products: emc_cloud_link
CVE-2021-36333 (published 2021-11-23)
Dell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. A local low privileged attacker, may potentially exploit this vulnerability, leading to an application crash.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: dell
Affected products: emc_cloud_link
CVE-2021-36334 (published 2021-11-23)
Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to arbitrary code execution on end user machine
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-1236
Affected vendors: dell
Affected products: emc_cloud_link
CVE-2021-36335 (published 2021-11-23)
Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, leading to execution of arbitrary files on the server
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: dell
Affected products: emc_cloud_link
CVE-2021-36336 (published 2021-12-21)
Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the affected system.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: dell
Affected products: wyse_management_suite
CVE-2021-36337 (published 2021-12-21)
Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby compromising Confidentiality and Integrity of data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-326
Affected vendors: dell
Affected products: wyse_management_suite
CVE-2021-36338 (published 2022-01-21)
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-602
Affected vendors: dell
Affected products: powermax_os, solutions_enabler, solutions_enabler_virtual_appliance, unisphere_360, unisphere_for_powermax, unisphere_for_powermax_virtual_appliance, vasa
CVE-2021-36339 (published 2022-01-21)
The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-250
Affected vendors: dell
Affected products: powermax_os, solutions_enabler, solutions_enabler_virtual_appliance, unisphere_360, unisphere_for_powermax, unisphere_for_powermax_virtual_appliance, vasa
CVE-2021-3634 (published 2021-08-31)
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating "secret_hash" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: debian, fedoraproject, libssh, netapp, oracle, redhat
Affected products: cloud_backup, debian_linux, enterprise_linux, fedora, libssh, mysql_workbench, virtualization
CVE-2021-36340 (published 2021-11-20)
Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: dell
Affected products: secure_connect_gateway
CVE-2021-36341 (published 2021-12-21)
Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticated user with low privileges could potentially exploit this vulnerability in order to access sensitive information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: dell
Affected products: wyse_device_agent
CVE-2021-36342 (published 2022-01-24)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: dell
Affected products: alienware_13_r3, alienware_13_r3_firmware, alienware_15_r3, alienware_15_r3_firmware, alienware_15_r4, alienware_15_r4_firmware, alienware_17_r4, alienware_17_r4_firmware, alienware_17_r5, alienware_17_r5_firmware, alienware_area_51m_r1, alienware_area_51m_r1_firmware, alienware_area_51m_r2, alienware_area_51m_r2_firmware, alienware_aurora_r11, alienware_aurora_r11_firmware, alienware_aurora_r12, alienware_aurora_r12_firmware, alienware_aurora_r8, alienware_aurora_r8_firmware, alienware_aurora_r9, alienware_aurora_r9_firmware, alienware_m15_r1, alienware_m15_r1_firmware, alienware_m15_r2
CVE-2021-36343 (published 2022-01-24)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: dell
Affected products: alienware_13_r3, alienware_13_r3_firmware, alienware_15_r3, alienware_15_r3_firmware, alienware_15_r4, alienware_15_r4_firmware, alienware_17_r4, alienware_17_r4_firmware, alienware_17_r5, alienware_17_r5_firmware, alienware_area_51m_r1, alienware_area_51m_r1_firmware, alienware_area_51m_r2, alienware_area_51m_r2_firmware, alienware_aurora_r11, alienware_aurora_r11_firmware, alienware_aurora_r12, alienware_aurora_r12_firmware, alienware_aurora_r8, alienware_aurora_r8_firmware, alienware_aurora_r9, alienware_aurora_r9_firmware, alienware_m15_r1, alienware_m15_r1_firmware, alienware_m15_r2
CVE-2021-36346 (published 2022-01-25)
Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to deny access to the iDRAC webserver.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-287
Affected vendors: dell
Affected products: integrated_dell_remote_access_controller_8, integrated_dell_remote_access_controller_8_firmware
CVE-2021-36347 (published 2022-01-25)
iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: dell
Affected products: integrated_dell_remote_access_controller_8, integrated_dell_remote_access_controller_8_firmware, integrated_dell_remote_access_controller_9, integrated_dell_remote_access_controller_9_firmware
CVE-2021-36348 (published 2022-01-25)
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-89
Affected vendors: dell
Affected products: integrated_dell_remote_access_controller_9, integrated_dell_remote_access_controller_9_firmware
CVE-2021-36349 (published 2022-01-24)
Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-918
Affected vendors: dell
Affected products: emc_data_protection_central
CVE-2021-3635 (published 2021-08-13)
A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: fedoraproject, linux, redhat
Affected products: enterprise_linux, fedora, linux_kernel
CVE-2021-36350 (published 2021-12-21)
Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authentication factors. A remote unauthenticated attacker may potentially exploit this vulnerability and bypass one of the factors of authentication.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: dell
Affected products: powerscale_onefs
CVE-2021-36351 (published 2021-08-06)
SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth, and (3) pyear parameters in GET requests sent to /modules/nursing/nursing-station.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: care2x
Affected products: hospital_information_management_system
CVE-2021-36352 (published 2021-08-26)
Stored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability has found POST requests in /modules/registration_admission/patient_register.php page with "name_middle", "addr_str", "station", "name_maiden", "name_2", "name_3" parameters.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: care2x
Affected products: hospital_information_management
CVE-2021-36356 (published 2021-08-31)
KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). NOTE: this issue exists because of an incomplete fix for CVE-2019-17124.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: kramerav
Affected products: viaware
CVE-2021-36357 (published 2021-10-22)
An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion function.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-681
Affected vendors: openpowerfoundation
Affected products: skiboot
CVE-2021-36359 (published 2021-08-30)
OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection because reportlab\platypus\paraparser.py (reached via bscw.cgi op=_editfolder.EditFolder) calls eval on attacker-supplied Python code. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-91
Affected vendors: bscw
Affected products: bscw_classic
CVE-2021-3636 (published 2021-07-30)
It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-295
Affected vendors: redhat
Affected products: openshift
CVE-2021-36363 (published 2021-09-28)
Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: nagios
Affected products: nagios_xi
CVE-2021-36364 (published 2021-09-28)
Nagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: nagios
Affected products: nagios_xi
CVE-2021-36365 (published 2021-09-28)
Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: nagios
Affected products: nagios_xi
CVE-2021-36366 (published 2021-09-28)
Nagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: nagios
Affected products: nagios_xi
CVE-2021-36367 (published 2021-07-09)
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Weakness: CWE-345
Affected vendors: putty
Affected products: putty
CVE-2021-36368 (published 2022-03-13)
An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-287
Affected vendors: debian, openbsd
Affected products: debian_linux, openssh
CVE-2021-36369 (published 2022-10-12)
An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: debian, dropbear_ssh_project
Affected products: debian_linux, dropbear_ssh
CVE-2021-3637 (published 2021-07-09)
A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: redhat
Affected products: keycloak, single_sign-on
CVE-2021-36370 (published 2021-08-30)
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: midnight-commander
Affected products: midnight_commander
CVE-2021-36371 (published 2021-07-09)
Emissary-Ingress (formerly Ambassador API Gateway) through 1.13.9 allows attackers to bypass client certificate requirements (i.e., mTLS cert_required) on backend upstreams when more than one TLSContext is defined and at least one configuration exists that does not require client certificate authentication. The attacker must send an SNI specifying an unprotected backend and an HTTP Host header specifying a protected backend. (2.x versions are unaffected. 1.x versions are unaffected with certain configuration settings involving prune_unreachable_routes and a wildcard Host resource.)
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-295
Affected vendors: getambassador
Affected products: emissary-ingress
CVE-2021-36372 (published 2021-11-19)
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-273
Affected vendors: apache
Affected products: ozone
CVE-2021-36373 (published 2021-07-14)
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-130
Affected vendors: apache, oracle
Affected products: agile_plm, ant, banking_trade_finance, banking_treasury_management, communications_cloud_native_core_automated_test_suite, communications_cloud_native_core_binding_support_function, communications_order_and_service_management, communications_unified_inventory_management, enterprise_repository, financial_services_analytical_applications_infrastructure, insurance_policy_administration, primavera_gateway, primavera_unifier, real-time_decision_server, retail_advanced_inventory_planning, retail_back_office, retail_bulk_data_integration, retail_central_office, retail_eftlink, retail_extract_transform_and_load, retail_financial_integration, retail_integration_bus, retail_invoice_matching, retail_merchandising_system, retail_point-of-service