Database CVE
Archivio delle vulnerabilità note (CVE) con punteggio CVSS, gravità, prodotti e vendor coinvolti. Filtra per anno e severità, collegato ai nostri articoli.
- CVE-2021-28664Alta8.8
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.
- CVE-2021-28663Alta8.8
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.
- CVE-2021-31755Critica9.8
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.
- CVE-2021-1906Media6.2
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2021-1905Alta8.4
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- CVE-2021-32030Critica9.8
The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\0' matches the device's default value of '\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.
- CVE-2021-1498Critica9.8
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
- CVE-2021-1497Critica9.8
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
- CVE-2021-21551Alta8.8
Il driver Dell dbutil_2_3.sys contiene una vulnerabilità di controllo degli accessi insufficiente che può portare a escalation dei privilegi, denial of service o divulgazione di informazioni. È richiesto l'accesso di un utente locale autenticato.
- CVE-2021-20090Critica9.8
A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.
- CVE-2021-29442Alta8.6
Nacos è una piattaforma progettata per la service discovery dinamica e la gestione della configurazione e dei servizi. In Nacos prima della versione 1.4.1, il ConfigOpsController consente all'utente di eseguire operazioni di gestione come interrogare il database o addirittura cancellarlo. Mentre l'endpoint /data/remove è correttamente protetto con l'annotazione @Secured, l'endpoint /derby non è protetto e può essere acceduto liberamente da utenti non autenticati. Questi endpoint sono validi solo quando si utilizza lo storage embedded (derby DB), quindi questo problema non dovrebbe riguardare le installazioni che utilizzano lo storage esterno (e.g. mysql)
- CVE-2021-29441Alta8.6
Nacos è una piattaforma progettata per la service discovery dinamica e la gestione della configurazione e dei servizi. In Nacos prima della versione 1.4.1, quando configurato per utilizzare l'autenticazione (-Dnacos.core.auth.enabled=true) Nacos utilizza il filtro servlet AuthFilter per imporre l'autenticazione. Questo filtro ha una backdoor che consente ai server Nacos di bypassare questo filtro e quindi di saltare i controlli di autenticazione. Questo meccanismo si basa sull'header HTTP user-agent, quindi può essere facilmente spoofato. Questo problema può consentire a qualsiasi utente di eseguire qualsiasi attività amministrativa sul server Nacos.
- CVE-2021-21224Alta8.8
Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- CVE-2021-21220Alta8.8
Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2021-21206Alta8.8
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2021-22205Critica10.0
È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni a partire dalla 11.9. GitLab non convalidava correttamente i file immagine passati a un parser di file, con conseguente esecuzione di comandi remoti.
- CVE-2021-22204Media6.8
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
- CVE-2021-22893Critica10.0
Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.
- CVE-2021-20023Media4.9
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.
- CVE-2021-3493Alta8.8
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.
This product uses the NVD API but is not endorsed or certified by the NVD.