stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-30964 (severity: MEDIUM, weakness: CWE-732)
An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. A malicious application may be able to bypass Privacy preferences.
CVE-2021-30965 (severity: MEDIUM, weakness: NVD-CWE-Other)
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to cause a denial of service to Endpoint Security clients.
CVE-2021-30966 (severity: HIGH, weakness: NVD-CWE-Other)
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. User traffic might unexpectedly be leaked to a proxy server despite PAC configurations.
CVE-2021-30967 (severity: MEDIUM, weakness: NVD-CWE-Other)
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A local attacker may be able to read sensitive information.
CVE-2021-30968 (severity: MEDIUM, weakness: CWE-59)
A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to bypass certain Privacy preferences.
CVE-2021-30969 (severity: HIGH, weakness: NVD-CWE-Other)
A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk.
CVE-2021-30970 (severity: MEDIUM, weakness: NVD-CWE-Other)
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences.
CVE-2021-30971 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVE-2021-30972 (severity: MEDIUM, weakness: CWE-863)
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences.
CVE-2021-30973 (severity: MEDIUM, weakness: CWE-125)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted file may disclose user information.
CVE-2021-30975 (severity: HIGH, weakness: CWE-863)
This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.
CVE-2021-30976 (severity: MEDIUM, weakness: NVD-CWE-Other)
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.
CVE-2021-30977 (severity: HIGH, weakness: CWE-120)
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30979 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVE-2021-30980 (severity: HIGH, weakness: CWE-416)
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30981 (severity: HIGH, weakness: CWE-120)
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. An application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30982 (severity: MEDIUM, weakness: CWE-362)
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A remote attacker may be able to cause unexpected application termination or heap corruption.
CVE-2021-30983 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30984 (severity: HIGH, weakness: CWE-362)
A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2021-30985 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30986 (severity: MEDIUM, weakness: NVD-CWE-Other)
A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address.
CVE-2021-30987 (severity: MEDIUM, weakness: CWE-863)
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked via BSSIDs.
CVE-2021-30988 (severity: MEDIUM, weakness: NVD-CWE-Other)
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to identify what other applications a user has installed.
CVE-2021-30990 (severity: MEDIUM, weakness: NVD-CWE-Other)
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.
CVE-2021-30991 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30992 (severity: MEDIUM, weakness: NVD-CWE-Other)
This issue was addressed with improved handling of file metadata. This issue is fixed in iOS 15.2 and iPadOS 15.2. A user in a FaceTime call may unexpectedly leak sensitive user information through Live Photos metadata.
CVE-2021-30993 (severity: HIGH, weakness: CWE-120)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. An attacker in a privileged network position may be able to execute arbitrary code.
CVE-2021-30994 (severity: LOW, weakness: NVD-CWE-Other)
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs.
CVE-2021-30995 (severity: HIGH, weakness: CWE-362)
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to elevate privileges.
CVE-2021-30996 (severity: HIGH, weakness: CWE-362)
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30997 (severity: HIGH, weakness: CWE-312)
A S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some MIME parts. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker may be able to recover plaintext contents of an S/MIME-encrypted e-mail.
CVE-2021-30998 (severity: MEDIUM, weakness: NVD-CWE-Other)
A S/MIME issue existed in the handling of encrypted email. This issue was addressed with improved selection of the encryption certificate. This issue is fixed in iOS 15.2 and iPadOS 15.2. A sender's email address may be leaked when sending an S/MIME encrypted email using a certificate with more than one email address.
CVE-2021-30999 (severity: MEDIUM, weakness: CWE-276)
The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be unable to fully delete browsing history.
CVE-2021-3100 (severity: HIGH, weakness: CWE-250)
The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges.
CVE-2021-31000 (severity: LOW, weakness: CWE-276)
A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read sensitive contact information.
CVE-2021-31001 (severity: MEDIUM, weakness: NVD-CWE-Other)
An access issue was addressed with improved access restrictions. This issue is fixed in iOS 15 and iPadOS 15. An attacker in a privileged network position may be able to leak sensitive user information.
CVE-2021-31002 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with system privileges.
CVE-2021-31004 (severity: HIGH, weakness: CWE-362)
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elevated privileges.
CVE-2021-31005 (severity: HIGH, weakness: NVD-CWE-Other)
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, macOS Monterey 12.0.1. Turning off "Block all remote content" may not apply to all remote content types.
CVE-2021-31006 (severity: MEDIUM, weakness: CWE-276)
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy preferences.
CVE-2021-31007 (severity: MEDIUM, weakness: CWE-276)
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences.
CVE-2021-31008 (severity: HIGH, weakness: CWE-843)
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 15.1, tvOS 15.1, iOS 15 and iPadOS 15, macOS Monterey 12.0.1, watchOS 8.1. Processing maliciously crafted web content may lead to code execution.
CVE-2021-31009 (severity: CRITICAL, weakness: NVD-CWE-Other)
Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. Multiple issues in HDF5.
CVE-2021-3101 (severity: HIGH, weakness: CWE-250)
Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container.
CVE-2021-31010 (severity: HIGH, weakness: CWE-502)
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..
CVE-2021-31013 (severity: MEDIUM, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2021-3109 (severity: MEDIUM, weakness: NVD-CWE-Other)
The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account.
CVE-2021-3110 (severity: CRITICAL, weakness: CWE-89)
The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_products[] parameter.
CVE-2021-3111 (severity: MEDIUM, weakness: CWE-79)
The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI.
CVE-2021-3113 (severity: HIGH, weakness: CWE-425)
Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, and can then use that cookie immediately for admin access,
CVE-2021-3114 (severity: MEDIUM, weakness: CWE-682)
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
CVE-2021-3115 (severity: HIGH, weakness: CWE-427)
Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).
CVE-2021-31152 (severity: HIGH, weakness: CWE-352)
Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers.
CVE-2021-31153 (severity: LOW, weakness: NVD-CWE-Other)
please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the search_path function, the --check option, or the -d option.
CVE-2021-31154 (severity: HIGH, weakness: CWE-668)
pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.
CVE-2021-31155 (severity: HIGH, weakness: CWE-732)
Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.
CVE-2021-31156 (severity: HIGH, weakness: CWE-22)
Allied Telesis AT-S115 1.2.0 devices before 1.00.024 with Boot Loader 1.00.006 allow Directory Traversal to achieve partial access to data.
CVE-2021-31158 (severity: MEDIUM, weakness: CWE-863)
In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.
CVE-2021-31159 (severity: MEDIUM, weakness: CWE-209)
Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732.
CVE-2021-3116 (severity: HIGH, weakness: CWE-697)
before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or).
CVE-2021-31160 (severity: HIGH, weakness: NVD-CWE-Other)
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.
CVE-2021-31162 (severity: CRITICAL, weakness: CWE-415)
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.
CVE-2021-31164 (severity: HIGH, weakness: CWE-93)
Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
CVE-2021-31165 (severity: HIGH, weakness: CWE-863)
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2021-31166 (severity: CRITICAL, weakness: CWE-416)
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2021-31167 (severity: HIGH, weakness: CWE-732)
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2021-31168 (severity: HIGH, weakness: CWE-269)
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2021-31169 (severity: HIGH, weakness: CWE-269)
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2021-31170 (severity: HIGH, weakness: CWE-416)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-31171 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2021-31172 (severity: HIGH, weakness: CWE-290)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-31173 (severity: MEDIUM, weakness: CWE-200)
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-31174 (severity: MEDIUM, weakness: CWE-125)
Microsoft Excel Information Disclosure Vulnerability
CVE-2021-31175 (severity: HIGH, weakness: CWE-416)
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31176 (severity: HIGH, weakness: CWE-416)
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31177 (severity: HIGH, weakness: CWE-416)
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31178 (severity: MEDIUM, weakness: CWE-191)
Microsoft Office Information Disclosure Vulnerability
CVE-2021-31179 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-3118 (severity: CRITICAL, weakness: CWE-89)
EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form (such as /req_password_user.php?email=). This allows an attacker to steal data in the database and obtain access to the application. (The database component runs as root.) NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVE-2021-31180 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-31181 (severity: HIGH, weakness: CWE-94)
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2021-31182 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Bluetooth Driver Spoofing Vulnerability
CVE-2021-31183 (severity: HIGH, weakness: NVD-CWE-Other)
Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2021-31184 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
CVE-2021-31185 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Desktop Bridge Denial of Service Vulnerability
CVE-2021-31186 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2021-31187 (severity: HIGH, weakness: CWE-59)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-31188 (severity: MEDIUM, weakness: CWE-416)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-3119 (severity: HIGH, weakness: CWE-476)
Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.
CVE-2021-31190 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
CVE-2021-31191 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
CVE-2021-31192 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Media Foundation Core Remote Code Execution Vulnerability
CVE-2021-31193 (severity: HIGH, weakness: NVD-CWE-Other)
Windows SSDP Service Elevation of Privilege Vulnerability
CVE-2021-31194 (severity: HIGH, weakness: NVD-CWE-Other)
OLE Automation Remote Code Execution Vulnerability
CVE-2021-31195 (severity: HIGH, weakness: CWE-290)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31196 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31198 (severity: HIGH, weakness: CWE-20)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31199 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-3120 (severity: CRITICAL, weakness: CWE-434)
An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must be able to place a valid Gift Card product into the shopping cart. An uploaded file is placed at a predetermined path on the web server with a user-specified filename and extension. This occurs because the ywgc-upload-picture parameter can have a .php value even though the intention was to only allow uploads of Gift Card images.
CVE-2021-31200 (severity: HIGH, weakness: NVD-CWE-Other)
Common Utilities Remote Code Execution Vulnerability
CVE-2021-31201 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31204 (severity: HIGH, weakness: NVD-CWE-Other)
.NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2021-31205 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows SMB Client Security Feature Bypass Vulnerability
CVE-2021-31206 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31207 (severity: MEDIUM, weakness: CWE-434)
Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE-2021-31208 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2021-31209 (severity: HIGH, weakness: CWE-290)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-3121 (severity: HIGH, weakness: CWE-129)
An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.
CVE-2021-31211 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-31213 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability
CVE-2021-31214 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-31215 (severity: HIGH, weakness: NVD-CWE-Other)
SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling.