Skip to main content
CVE-2021-37031 Nov 23, 16:15 HIGH This Week

There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Emui Huawei Magic Ui
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37030 Nov 23, 16:15 HIGH This Week

There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Emui Huawei Magic Ui
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-37026 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37025 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37024 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37019 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37018 Nov 23, 16:15 HIGH This Week

There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37017 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37015 Nov 23, 16:15 HIGH This Week

There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37012 Nov 23, 16:15 HIGH This Week

There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37010 Nov 23, 16:15 HIGH This Week

There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37009 Nov 23, 16:15 HIGH This Week

There is a Configuration vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37008 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37007 Nov 23, 16:15 HIGH This Week

There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37006 Nov 23, 16:15 HIGH This Week

There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-37005 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37004 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-37003 Nov 23, 16:15 HIGH This Week

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Harmonyos Huawei
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-20601 Nov 23, 15:15 HIGH This Week

Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Gt Softgot2000 Got Simple Gs2110 Wtbd Firmware Got Simple Gs2107 Wtbd Firmware Got2000 Gt2104 Rtbd Firmware +47
NVD
CVSS 3.1
7.5
EPSS
2.3%
CVE-2021-36313 Nov 23, 20:15 HIGH This Week

Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Dell Cloudlink
NVD
CVSS 3.1
7.2
EPSS
2.1%
CVE-2021-36301 Nov 23, 20:15 HIGH PATCH This Week

Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Buffer Overflow Stack Overflow Dell Emc Idrac9 Firmware Emc Idrac8 Firmware
NVD
CVSS 3.1
7.2
EPSS
27.7%
CVE-2021-40831 Nov 23, 00:15 HIGH PATCH This Week

The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on macOS systems. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Python Java Node.js Apple +3
NVD GitHub
CVSS 3.1
7.2
EPSS
0.6%
CVE-2021-36334 Nov 23, 20:15 MEDIUM PATCH This Month

Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Dell Emc Cloud Link
NVD
CVSS 3.1
6.8
EPSS
0.7%
CVE-2021-38875 Nov 23, 20:15 MEDIUM PATCH This Month

IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service IBM Mq
NVD
CVSS 3.1
6.5
EPSS
1.0%
CVE-2021-37023 Nov 23, 16:15 MEDIUM This Month

There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause media files which can be reads and writes in non-distributed directories. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Harmonyos Huawei
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2021-31852 Nov 23, 20:15 MEDIUM This Month

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID request parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Policy Auditor Mcafee
NVD
CVSS 3.1
6.1
EPSS
0.8%
CVE-2021-31851 Nov 23, 20:15 MEDIUM This Month

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the profileNodeID request. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Policy Auditor Mcafee
NVD
CVSS 3.1
6.1
EPSS
0.8%
CVE-2021-24873 Nov 23, 20:15 MEDIUM PATCH This Month

The Tutor LMS WordPress plugin before 1.9.11 does not sanitise and escape user input before outputting back in attributes in the Student Registration page, leading to a Reflected Cross-Site Scripting. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Tutor Lms Wordpress Plugin Themeum
NVD WPScan
CVSS 3.1
6.1
EPSS
0.8%
CVE-2021-22356 Nov 23, 16:15 MEDIUM This Month

There is a weak secure algorithm vulnerability in Huawei products. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Huawei Secospace Usg6500 Firmware Usg9500 Firmware Secospace Usg6300 Firmware +3
NVD
CVSS 3.1
5.9
EPSS
0.4%
CVE-2021-36333 Nov 23, 20:15 MEDIUM PATCH This Month

Dell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Dell Emc Cloud Link
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2021-21561 Nov 23, 20:15 MEDIUM PATCH This Month

Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Dell Emc Powerscale Onefs
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2021-37036 Nov 23, 15:15 MEDIUM This Month

There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Huawei Fusioncompute Ecns280 Td Firmware
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2021-36332 Nov 23, 20:15 MEDIUM PATCH This Month

Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Open Redirect Dell Emc Cloud Link
NVD
CVSS 3.1
5.4
EPSS
0.6%
CVE-2021-25986 Nov 23, 20:15 MEDIUM PATCH This Month

In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS Python Django Wiki
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2021-22410 Nov 23, 15:15 MEDIUM This Month

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Huawei Imaster Nce Fabric Firmware
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2021-38980 Nov 23, 20:15 MEDIUM PATCH This Month

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM Security Key Lifecycle Manager Security Guardium Key Lifecycle Manager
NVD
CVSS 3.1
5.3
EPSS
1.2%
CVE-2021-37032 Nov 23, 16:15 MEDIUM This Month

There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Balance to fail to work. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Emui Huawei Magic Ui
NVD
CVSS 3.1
5.3
EPSS
0.7%
CVE-2021-37029 Nov 23, 16:15 MEDIUM This Month

There is an Identity verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Emui Huawei Magic Ui
NVD
CVSS 3.1
5.3
EPSS
0.6%
CVE-2021-37013 Nov 23, 16:15 MEDIUM This Month

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Harmonyos Huawei
NVD
CVSS 3.1
5.3
EPSS
0.6%
CVE-2021-38004 Nov 23, 22:15 MEDIUM This Month

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Chrome Google Debian Debian Linux
NVD
CVSS 3.1
4.3
EPSS
0.8%
Prev Page 2 of 2

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy