alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-26387 (published 2024-08-13)
Insufficient access controls in ASP kernel may allow a
privileged attacker with access to AMD signing keys and the BIOS menu or UEFI
shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L)
Weakness: CWE-863
CVE-2021-26388 (published 2022-05-11)
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7352, epyc_7352_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3
CVE-2021-26390 (published 2022-05-10)
A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: amd
Affected products: athlon_300u, athlon_300u_firmware, ryzen_3_3200u, ryzen_3_3200u_firmware, ryzen_3_3300u, ryzen_3_3300u_firmware, ryzen_3_5300g, ryzen_3_5300g_firmware, ryzen_3_5300ge, ryzen_3_5300ge_firmware, ryzen_5_2600, ryzen_5_2600_firmware, ryzen_5_2600x, ryzen_5_2600x_firmware, ryzen_5_2700, ryzen_5_2700_firmware, ryzen_5_2700x, ryzen_5_2700x_firmware, ryzen_5_3500u, ryzen_5_3500u_firmware, ryzen_5_3550h, ryzen_5_3550h_firmware, ryzen_5_3600, ryzen_5_3600_firmware, ryzen_5_3600x
CVE-2021-26391 (published 2022-11-09)
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: amd
Affected products: enterprise_driver, radeon_pro_software, radeon_pro_w5500, radeon_pro_w5500x, radeon_pro_w5700, radeon_pro_w5700x, radeon_pro_w6300m, radeon_pro_w6400, radeon_pro_w6500m, radeon_pro_w6600, radeon_pro_w6600m, radeon_pro_w6600x, radeon_pro_w6800, radeon_pro_w6800x, radeon_pro_w6800x_duo, radeon_pro_w6900x, radeon_rx_5300, radeon_rx_5300_xt, radeon_rx_5300m, radeon_rx_5500, radeon_rx_5500_xt, radeon_rx_5500m, radeon_rx_5600, radeon_rx_5600_xt, radeon_rx_5600m
CVE-2021-26392 (published 2022-11-09)
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: amd_3015ce, amd_3015ce_firmware, amd_3015e, amd_3015e_firmware, amd_3020e, amd_3020e_firmware, athlon_gold_3150c, athlon_gold_3150c_firmware, athlon_gold_3150u, athlon_gold_3150u_firmware, athlon_pro_3045b, athlon_pro_3045b_firmware, athlon_pro_3145b, athlon_pro_3145b_firmware, athlon_silver_3050c, athlon_silver_3050c_firmware, athlon_silver_3050e, athlon_silver_3050e_firmware, athlon_silver_3050u, athlon_silver_3050u_firmware, enterprise_driver, radeon_pro_software, radeon_pro_w5500, radeon_pro_w5500x, radeon_pro_w5700
CVE-2021-26393 (published 2022-11-09)
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-401
Affected vendors: amd
Affected products: amd_3015ce, amd_3015ce_firmware, amd_3015e, amd_3015e_firmware, amd_3020e, amd_3020e_firmware, athlon_gold_3150c, athlon_gold_3150c_firmware, athlon_gold_3150u, athlon_gold_3150u_firmware, athlon_pro_3045b, athlon_pro_3045b_firmware, athlon_pro_3145b, athlon_pro_3145b_firmware, athlon_silver_3050c, athlon_silver_3050c_firmware, athlon_silver_3050e, athlon_silver_3050e_firmware, athlon_silver_3050u, athlon_silver_3050u_firmware, enterprise_driver, radeon_pro_software, radeon_pro_w5500, radeon_pro_w5500x, radeon_pro_w5700
CVE-2021-26396 (published 2023-01-11)
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.


Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Weakness: CWE-345
Affected vendors: amd
Affected products: epyc_7003, epyc_7003_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p, epyc_7443p_firmware, epyc_7453, epyc_7453_firmware, epyc_74f3, epyc_74f3_firmware, epyc_7513
CVE-2021-26397 (published 2023-05-09)
Insufficient address validation, may allow an
attacker with a compromised ABL and UApp to corrupt sensitive memory locations
potentially resulting in a loss of integrity or availability.








Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Affected vendors: amd
Affected products: epyc_72f3, epyc_72f3_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p, epyc_7443p_firmware, epyc_7453, epyc_7453_firmware, epyc_7473x, epyc_7473x_firmware, epyc_74f3, epyc_74f3_firmware, epyc_7513
CVE-2021-26398 (published 2023-01-11)
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301
CVE-2021-26400 (published 2022-05-11)
AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: amd
Affected products: cpu
CVE-2021-26401 (published 2022-03-11)
LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: amd
Affected products: a10-9600p, a10-9600p_firmware, a10-9630p, a10-9630p_firmware, a12-9700p, a12-9700p_firmware, a12-9730p, a12-9730p_firmware, a4-9120, a4-9120_firmware, a6-9210, a6-9210_firmware, a6-9220, a6-9220_firmware, a6-9220c, a6-9220c_firmware, a9-9410, a9-9410_firmware, a9-9420, a9-9420_firmware, athlon_gold_3150ge, athlon_gold_3150ge_firmware, athlon_gold_3150u, athlon_gold_3150u_firmware, athlon_gold_3450g
CVE-2021-26402 (published 2023-01-11)
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343
CVE-2021-26403 (published 2023-01-11)
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-345
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7002, epyc_7002_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_7301, epyc_7301_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p
CVE-2021-26404 (published 2023-01-11)
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7003, epyc_7003_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p, epyc_7443p_firmware, epyc_7453, epyc_7453_firmware, epyc_7473x, epyc_7473x_firmware, epyc_74f3, epyc_74f3_firmware, epyc_7513
CVE-2021-26406 (published 2023-05-09)
Insufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.





Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_7301, epyc_7301_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7351, epyc_7351_firmware, epyc_7351p
CVE-2021-26407 (published 2023-01-11)
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-330
Affected vendors: amd
Affected products: romepi, romepi_firmware
CVE-2021-26408 (published 2022-05-10)
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7002, epyc_7002_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_7301, epyc_7301_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7351
CVE-2021-26409 (published 2023-01-11)
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity.  


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: amd
Affected products: milanpi, milanpi_firmware
CVE-2021-26411 (published 2021-03-11)
Internet Explorer Memory Corruption Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L)
Weakness: CWE-416
Affected vendors: microsoft
Affected products: edge, internet_explorer, windows_10_1507, windows_10_1607, windows_10_1803, windows_10_1809, windows_10_1909, windows_10_2004, windows_10_20h2, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
Added to CISA KEV catalog: 2021-11-03
KEV required action: Apply updates per vendor instructions.
CVE-2021-26412 (published 2021-03-03)
Microsoft Exchange Server Remote Code Execution Vulnerability
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: exchange_server
CVE-2021-26413 (published 2021-04-13)
Windows Installer Spoofing Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26414 (published 2021-06-08)
Windows DCOM Server Security Feature Bypass
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2021-26415 (published 2021-04-13)
Windows Installer Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26416 (published 2021-04-13)
Windows Hyper-V Denial of Service Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-26417 (published 2021-04-13)
Windows Overlay Filter Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2021-26418 (published 2021-05-11)
Microsoft SharePoint Server Spoofing Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)
Weakness: CWE-290
Affected vendors: microsoft
Affected products: sharepoint_foundation, sharepoint_server
CVE-2021-26419 (published 2021-05-11)
Scripting Engine Memory Corruption Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: microsoft
Affected products: internet_explorer, windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26420 (published 2021-06-08)
Microsoft SharePoint Server Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L)
Affected vendors: microsoft
Affected products: sharepoint_enterprise_server, sharepoint_foundation, sharepoint_server
CVE-2021-26421 (published 2021-05-11)
Skype for Business and Lync Spoofing Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N)
Affected vendors: microsoft
Affected products: lync_server, skype_for_business_server
CVE-2021-26422 (published 2021-05-11)
Skype for Business and Lync Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: lync_server, skype_for_business_server
CVE-2021-26423 (published 2021-08-12)
.NET Core and Visual Studio Denial of Service Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: microsoft
Affected products: .net, .net_core, powershell_core, visual_studio_2017, visual_studio_2019
CVE-2021-26424 (published 2021-08-12)
Windows TCP/IP Remote Code Execution Vulnerability
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26425 (published 2021-08-12)
Windows Event Tracing Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26426 (published 2021-08-12)
Windows User Account Profile Picture Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26427 (published 2021-10-13)
Microsoft Exchange Server Remote Code Execution Vulnerability
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: exchange_server
CVE-2021-26428 (published 2021-08-12)
Azure Sphere Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: azure_sphere
CVE-2021-26429 (published 2021-08-12)
Azure Sphere Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L)
Affected vendors: microsoft
Affected products: azure_sphere
CVE-2021-26430 (published 2021-08-12)
Azure Sphere Denial of Service Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Affected vendors: microsoft
Affected products: azure_sphere
CVE-2021-26431 (published 2021-08-12)
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016
CVE-2021-26432 (published 2021-08-12)
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_8.1, windows_rt_8.1, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26433 (published 2021-08-12)
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_8.1, windows_rt_8.1, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2021-26434 (published 2021-09-15)
Visual Studio Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: microsoft
Affected products: visual_studio_2017, visual_studio_2019
CVE-2021-26435 (published 2021-09-15)
Windows Scripting Engine Memory Corruption Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Weakness: CWE-787
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2021-26436 (published 2021-09-02)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Affected vendors: microsoft
Affected products: edge
CVE-2021-26437 (published 2021-09-15)
Visual Studio Code Spoofing Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: visual_studio_code
CVE-2021-26439 (published 2021-09-02)
Microsoft Edge for Android Information Disclosure Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: google, microsoft
Affected products: android, edge
CVE-2021-26441 (published 2021-10-13)
Storage Spaces Controller Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: microsoft
Affected products: windows_10, windows_11, windows_8.1, windows_rt_8.1, windows_server, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2021-26442 (published 2021-10-13)
Windows HTTP.sys Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_11, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2021-26443 (published 2021-11-10)
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_11, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2021-26444 (published 2021-11-10)
Azure RTOS Information Disclosure Vulnerability
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Affected vendors: microsoft
Affected products: azure_real_time_operating_system
CVE-2021-26461 (published 2021-06-21)
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: apache
Affected products: nuttx
CVE-2021-26471 (published 2021-06-08)
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php accepts a command argument. Using this command argument an unauthenticated attacker can execute arbitrary shell commands.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: vembu
Affected products: bdr_suite, offsite_dr
CVE-2021-26472 (published 2021-06-08)
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: microsoft, vembu
Affected products: bdr_suite, offsite_dr, windows
CVE-2021-26473 (published 2021-06-08)
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitrary files in the context of the web server process. These files can then be executed remotely by calling the file via the web server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: vembu
Affected products: bdr_suite, offsite_dr
CVE-2021-26474 (published 2021-06-08)
Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in this family may be affected too.)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: vembu
Affected products: bdr_suite, offsite_dr
CVE-2021-26475 (published 2021-03-01)
EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: eprints
Affected products: eprints
CVE-2021-26476 (published 2021-03-01)
EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: eprints
Affected products: eprints
CVE-2021-26504 (published 2023-08-11)
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: dgtl
Affected products: huemagic
CVE-2021-26505 (published 2023-08-11)
Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1321
Affected vendors: hello.js_project
Affected products: hello.js
CVE-2021-26528 (published 2021-02-08)
The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-787
Affected vendors: cesanta
Affected products: mongoose
CVE-2021-26529 (published 2021-02-08)
The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-787
Affected vendors: cesanta
Affected products: mongoose
CVE-2021-26530 (published 2021-02-08)
The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-787
Affected vendors: cesanta
Affected products: mongoose
CVE-2021-26539 (published 2021-02-08)
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: apostrophecms
Affected products: sanitize-html
CVE-2021-26540 (published 2021-02-08)
Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts with "/\\example.com".
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: apostrophecms
Affected products: sanitize-html
CVE-2021-26541 (published 2021-02-08)
The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: gitlog_project
Affected products: gitlog
CVE-2021-26543 (published 2021-05-06)
The "gitDiff" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. The issue has been resolved in version 1.0.5.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: wayfair
Affected products: git-parse
CVE-2021-26544 (published 2021-02-20)
Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: apache
Affected products: livy
CVE-2021-26549 (published 2021-02-09)
An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: smartfoxserver
Affected products: smartfoxserver
CVE-2021-26550 (published 2021-02-09)
An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: smartfoxserver
Affected products: smartfoxserver
CVE-2021-26551 (published 2021-02-09)
An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: smartfoxserver
Affected products: smartfoxserver
CVE-2021-26556 (published 2021-10-07)
When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: octopus
Affected products: octopus_deploy, octopus_server
CVE-2021-26557 (published 2021-10-07)
When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: octopus
Affected products: tentacle
CVE-2021-26558 (published 2021-11-11)
Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-502
Affected vendors: apache
Affected products: shardingsphere-ui
CVE-2021-26559 (published 2021-02-17)
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg`. This allowed a privilege escalation attack. This issue affects Apache Airflow 2.0.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: apache
Affected products: airflow
CVE-2021-26560 (published 2021-02-26)
Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-319
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26561 (published 2021-02-26)
Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26562 (published 2021-02-26)
Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26563 (published 2021-02-26)
Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26564 (published 2021-02-26)
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N)
Weakness: CWE-319
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26565 (published 2021-02-26)
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-319
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26566 (published 2021-02-26)
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-201
Affected vendors: synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26567 (published 2021-02-26)
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: faad2_project, synology
Affected products: diskstation_manager, diskstation_manager_unified_controller, faad2, skynas, skynas_firmware, uc3200, vs960hd, vs960hd_firmware
CVE-2021-26569 (published 2021-03-12)
Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-366
Affected vendors: synology
Affected products: diskstation_manager
CVE-2021-26570 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26571 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26572 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26573 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26574 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26575 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26576 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26577 (published 2021-02-08)
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: hpe
Affected products: apollo_70_system, baseboard_management_controller
CVE-2021-26578 (published 2021-03-22)
A potential security vulnerability has been identified in HPE Network Orchestrator (NetO) version(s): Prior to 2.5. The vulnerability could be remotely exploited with SQL injection.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: hpe
Affected products: network_orchestrator
CVE-2021-26579 (published 2021-03-30)
A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded Cryptographic Key in a product). HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM). Version 1.2103.0 of HPE Unified Data Management (UDM) removes all hard-coded cryptographic keys.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: hpe
Affected products: unified_data_management
CVE-2021-26580 (published 2021-04-01)
A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or later.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hpe
Affected products: integrated_lights-out_amplifier
CVE-2021-26581 (published 2021-04-01)
A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: hpe
Affected products: superdome_flex_server, superdome_flex_server_firmware
CVE-2021-26582 (published 2021-04-15)
A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp, microsoft, redhat
Affected products: enterprise_linux, hp-ux, icewall_sso_dgfw, windows
CVE-2021-26583 (published 2021-05-10)
A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: ilo_amplifier_pack
CVE-2021-26584 (published 2021-06-03)
A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hp
Affected products: oneview_for_vmware_vcenter
CVE-2021-26585 (published 2021-06-24)
A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView Global Dashboard. The issue is resolved in 2.32.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: hpe
Affected products: oneview_global_dashboard
CVE-2021-26586 (published 2021-08-05)
A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to disclose sensitive information. HPE has made software updates available to resolve the vulnerability in the HPE Edgeline Infrastructure Manager (EIM).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: hp
Affected products: edgeline_infrastructure_management
CVE-2021-26587 (published 2021-09-27)
A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce 4.3.0, to resolve the vulnerability in HPE StoreOnce.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)
Weakness: CWE-79
Affected vendors: hpe
Affected products: storeonce_3620, storeonce_3620_firmware, storeonce_3640, storeonce_3640_firmware, storeonce_5200, storeonce_5200_firmware, storeonce_5250, storeonce_5250_firmware, storeonce_5650, storeonce_5650_firmware, storeonce_vsa_4tb, storeonce_vsa_4tb_firmware
CVE-2021-26588 (published 2021-10-11)
A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage array firmware. An unauthenticated user could remotely exploit the low complexity issue to execute code as administrator. This vulnerability impacts completely the confidentiality, integrity, availability of the array. HPE has made the following software updates and mitigation information to resolve the vulnerability in 3PAR, Primera and Alletra 9000 firmware.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: 3par_os, 3par_storeserv_10400, 3par_storeserv_10800, 3par_storeserv_20000, 3par_storeserv_7200c, 3par_storeserv_7400c, 3par_storeserv_7440c, 3par_storeserv_8000, 3par_storeserv_9000, alletra_9060, alletra_9060_firmware, alletra_9080, alletra_9080_firmware, primera_630, primera_630_firmware, primera_650, primera_650_firmware, primera_670, primera_670_firmware
CVE-2021-26589 (published 2021-10-19)
A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE Superdome Flex Servers.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-732
Affected vendors: hpe
Affected products: superdome_flex, superdome_flex_280, superdome_flex_280_firmware, superdome_flex_firmware
CVE-2021-26593 (published 2021-02-23)
In Directus 8.x through 8.8.1, an attacker can see all users in the CMS using the API /users/{id}. For each call, they get in response a lot of information about the user (such as email address, first name, and last name) but also the secret for 2FA if one exists. This secret can be regenerated. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: rangerstudio
Affected products: directus
CVE-2021-26594 (published 2021-02-23)
In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: rangerstudio
Affected products: directus
CVE-2021-26595 (published 2021-02-23)
In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-312
Affected vendors: rangerstudio
Affected products: directus
CVE-2021-26596 (published 2021-03-25)
An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. Here, the /netact/sct filename parameter is used.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: nokia
Affected products: netact