rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-46676 Vulnerability XSS in Transaction Map name field
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the transactional maps name field.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Artica PFMS
product: Pandora FMS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-08-05T15:25:56.304Z
CVE-2021-46677 Vulnerability XSS in Event filter name field
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the event filter name field.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Artica PFMS
product: Pandora FMS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-08-05T15:26:09.756Z
CVE-2021-46678 Vulnerability XSS in service form name field
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the service name field.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Artica PFMS
product: Pandora FMS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-08-05T15:26:35.439Z
CVE-2021-46679 Vulnerability XSS in service elements
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Artica PFMS
product: Pandora FMS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-08-05T15:25:41.856Z
CVE-2021-46680 Vulnerability XSS in module form name field
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Artica PFMS
product: Pandora FMS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-08-05T15:26:24.428Z
CVE-2021-46681 Vulnerability XSS in module mass operation name field
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via module massive operation name field.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Artica PFMS
product: Pandora FMS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-08-05T15:25:33.950Z
CVE-2021-46686 
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.
Problem types: cwe_id: CWE-78
description: Improper neutralization of special elements used in an OS command ('OS Command Injection')
Affected products: vendor: Extra Innovation Inc.
product: acmailer CGI
vendor: Extra Innovation Inc.
product: acmailer DB
Published: 2025-02-17T23:58:10.727Z
CVE-2021-46687 
JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.
Problem types: cwe_id: CWE-359
description: CWE-359 Exposure of Private Information ('Privacy Violation')
Affected products: vendor: JFrog
product: JFrog Artifactory
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2022-07-06T09:35:11.000Z
CVE-2021-46699 
A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack based buffer overflow vulnerability while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15061)
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Siemens
product: Simcenter Femap
Published: 2022-02-22T17:52:42.000Z
CVE-2021-46700 
In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-19T18:22:19.000Z
CVE-2021-46701 
PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:N
version: 3.1
Published: 2022-02-20T20:20:27.000Z
CVE-2021-46702 
Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-26T02:56:26.000Z
CVE-2021-46703 
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-06T05:29:07.000Z
CVE-2021-46704 
In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-06T06:23:47.000Z
CVE-2021-46705 grub2-once uses fixed file name in /var/tmp
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.
Problem types: cwe_id: CWE-377
description: CWE-377: Insecure Temporary File
Affected products: vendor: SUSE
product: SUSE Linux Enterprise Server 15 SP4
vendor: SUSE
product: openSUSE Factory
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Ludwig Nussel of SUSE
Published: 2022-03-16T09:50:10.172Z
CVE-2021-46708 
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-11T06:47:56.000Z
CVE-2021-46709 
phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-13T18:25:13.000Z
CVE-2021-46740 
The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Weaknesses Introduced During Design
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
Published: 2022-04-11T19:38:23.000Z
CVE-2021-46741 
The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.
Problem types: description: Weaknesses Introduced During Design
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-07-11T13:52:47.000Z
CVE-2021-46742 
The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.
Problem types: description: Unauthorized insertion vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-04-11T19:38:22.000Z
CVE-2021-46743 
In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are loaded in a key ring. This allows an attacker to forge tokens that validate under the incorrect key. NOTE: this provides a straightforward way to use the PHP-JWT library unsafely, but might not be considered a vulnerability in the library itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T06:40:18.000Z
CVE-2021-46744 
An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Processors
Published: 2022-05-11T16:40:21.925Z
CVE-2021-46747 
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.
Problem types: cwe_id: CWE-1220
description: CWE-1220  Insufficient Granularity of Access Control
Affected products: vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 5000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
Published: 2026-06-01T19:01:27.968Z
CVE-2021-46748 
Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.
Affected products: vendor: AMD
product: Radeon™ RX 5000/6000/7000 Series Graphics Cards
default_status: unaffected
vendor: AMD
product: Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards
default_status: unaffected
vendor: AMD
product: Radeon™ RX Vega Series Graphics Cards
default_status: unaffected
vendor: AMD
product: Radeon™ PRO WX Vega Series Graphics Cards
default_status: unaffected
Published: 2023-11-14T18:50:52.470Z
CVE-2021-46749 
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.





Affected products: vendor: AMD
product: Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
Published: 2023-05-09T18:59:39.837Z
CVE-2021-46750 
Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR (Trusted Memory Region) that was previously allocated by the ASP bootloader leading to a potential loss of integrity.
Problem types: cwe_id: CWE-190
description: CWE-190  Integer Overflow or Wraparound
Affected products: vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000 Series
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620 Graphics Products
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Published: 2025-09-06T16:03:55.584Z
CVE-2021-46753 
Failure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers may allow an attacker with a
malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite
data structures leading to a potential loss of confidentiality and integrity.





Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 6000 Series Mobile Processors  "Rembrandt"
default_status: unaffected
Published: 2023-05-09T19:00:04.895Z
CVE-2021-46754 
Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.









Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: unaffected
Published: 2023-05-09T19:00:16.712Z
CVE-2021-46755 
Failure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker
with a malicious bootloader to exhaust the SysHub resources resulting in a
potential denial of service.





Affected products: vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
Published: 2023-05-09T19:00:26.747Z