Skip to main content
CVE-2021-36320 Nov 20, 02:15 CRITICAL PATCH Act Now

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Dell X4012 Firmware X1008P Firmware X1018P Firmware +6
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-36308 Nov 20, 02:15 CRITICAL PATCH Act Now

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Dell Networking Os10
NVD
CVSS 3.1
9.8
EPSS
3.2%
CVE-2021-36306 Nov 20, 02:15 CRITICAL PATCH Act Now

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Dell Networking Os10
NVD
CVSS 3.1
9.8
EPSS
3.6%
CVE-2021-36307 Nov 20, 02:15 HIGH PATCH This Week

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Dell Networking Os10
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2021-34358 Nov 20, 01:15 HIGH This Week

We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Qnap Qmailagent
NVD
CVSS 3.1
8.8
EPSS
0.4%
CVE-2021-23217 Nov 20, 15:15 HIGH This Week

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time. Rated high severity (CVSS 7.5). No vendor patch available.

RCE Nvidia Jetson Tx1 Geforce Gt 605 Geforce Gt 610 +60
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2021-23201 Nov 20, 15:15 HIGH This Week

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and. Rated high severity (CVSS 7.5). No vendor patch available.

Denial Of Service Information Disclosure Nvidia Jetson Tx1 Geforce Gtx 950 +33
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2021-36321 Nov 20, 02:15 HIGH PATCH This Week

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Dell X4012 Firmware X1008P Firmware X1018P Firmware +6
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-36322 Nov 20, 02:15 MEDIUM PATCH This Month

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Dell X4012 Firmware X1008P Firmware X1018P Firmware +6
NVD
CVSS 3.1
6.1
EPSS
0.8%
CVE-2021-36340 Nov 20, 02:15 MEDIUM This Month

Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Dell Secure Connect Gateway
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2021-38681 Nov 20, 01:15 MEDIUM This Month

A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Qnap Ragic Cloud Db
NVD
CVSS 3.1
5.4
EPSS
0.7%
CVE-2021-36310 Nov 20, 02:15 MEDIUM PATCH This Month

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Dell Networking Os10
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2021-34400 Nov 20, 15:15 MEDIUM This Month

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed memory, which may. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nvidia Jetson Tx1 Jetson Tx2 Dgx 1 P100 +132
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2021-34399 Nov 20, 15:15 MEDIUM This Month

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nvidia Jetson Tx1 Jetson Tx2 Dgx 1 P100 +132
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2021-1125 Nov 20, 15:15 MEDIUM This Month

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nvidia Jetson Tx1 Jetson Tx2 Dgx 1 P100 +104
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2021-1105 Nov 20, 15:15 MEDIUM This Month

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nvidia Jetson Tx1 Jetson Tx2 Dgx 1 P100 +132
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2021-1088 Nov 20, 15:15 MEDIUM This Month

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control,. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nvidia Jetson Tx1 Jetson Tx2 Dgx 1 P100 +132
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2021-23219 Nov 20, 15:15 MEDIUM This Month

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by identifying, exploiting, and. Rated medium severity (CVSS 4.1). No vendor patch available.

Information Disclosure Nvidia Jetson Tx1 Jetson Tx2 Dgx 1 P100 +132
NVD
CVSS 3.1
4.1
EPSS
0.2%
CVE-2021-36319 Nov 20, 02:15 LOW PATCH Monitor

Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Dell Networking Os10
NVD
CVSS 3.1
3.3
EPSS
0.2%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy