Total
29473 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-42773 | 1 Broadcom | 1 Emulex Hba Manager | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, could allow a user to retrieve an arbitrary file from a remote host with the GetDumpFile command. In non-secure mode, the user is unauthenticated. | |||||
CVE-2021-42766 | 1 Proof-of-stake Ethereum Project | 1 Proof-of-stake Ethereum | 2024-11-21 | 6.4 MEDIUM | 9.1 CRITICAL |
The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consensus chain reorganizations), even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an increase in the profits of individual validators. | |||||
CVE-2021-42765 | 1 Proof-of-stake Ethereum Project | 1 Proof-of-stake Ethereum | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service (indefinite stalling of consensus decisions). | |||||
CVE-2021-42764 | 1 Proof-of-stake Ethereum Project | 1 Proof-of-stake Ethereum | 2024-11-21 | 6.4 MEDIUM | 9.1 CRITICAL |
The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consensus decisions), and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain. | |||||
CVE-2021-42744 | 1 Philips | 4 Mri 1.5t, Mri 1.5t Firmware, Mri 3t and 1 more | 2024-11-21 | 2.1 LOW | 6.2 MEDIUM |
Philips MRI 1.5T and MRI 3T Version 5.x.x exposes sensitive information to an actor not explicitly authorized to have access. | |||||
CVE-2021-42575 | 2 Oracle, Owasp | 3 Middleware Common Libraries And Tools, Primavera Unifier, Java Html Sanitizer | 2024-11-21 | 7.5 HIGH | 9.8 CRITICAL |
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements. | |||||
CVE-2021-42323 | 1 Microsoft | 1 Azure Real Time Operating System | 2024-11-21 | 2.1 LOW | 3.3 LOW |
Azure RTOS Information Disclosure Vulnerability | |||||
CVE-2021-42316 | 1 Microsoft | 1 Dynamics 365 | 2024-11-21 | 6.5 MEDIUM | 8.8 HIGH |
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | |||||
CVE-2021-42315 | 1 Microsoft | 1 Defender For Iot | 2024-11-21 | 6.5 MEDIUM | 8.8 HIGH |
Microsoft Defender for IoT Remote Code Execution Vulnerability | |||||
CVE-2021-42314 | 1 Microsoft | 1 Defender For Iot | 2024-11-21 | 6.5 MEDIUM | 8.8 HIGH |
Microsoft Defender for IoT Remote Code Execution Vulnerability | |||||
CVE-2021-42312 | 1 Microsoft | 1 Defender For Iot | 2024-11-21 | 4.6 MEDIUM | 7.8 HIGH |
Microsoft Defender for IoT Elevation of Privilege Vulnerability | |||||
CVE-2021-42310 | 1 Microsoft | 1 Defender For Iot | 2024-11-21 | 7.5 HIGH | 8.1 HIGH |
Microsoft Defender for IoT Remote Code Execution Vulnerability | |||||
CVE-2021-42305 | 1 Microsoft | 1 Exchange Server | 2024-11-21 | 4.3 MEDIUM | 6.5 MEDIUM |
Microsoft Exchange Server Spoofing Vulnerability | |||||
CVE-2021-42301 | 1 Microsoft | 1 Azure Rtos | 2024-11-21 | 2.1 LOW | 3.3 LOW |
Azure RTOS Information Disclosure Vulnerability | |||||
CVE-2021-42300 | 1 Microsoft | 1 Azure Sphere | 2024-11-21 | 4.6 MEDIUM | 6.0 MEDIUM |
Azure Sphere Tampering Vulnerability | |||||
CVE-2021-42299 | 1 Microsoft | 2 Surface Pro 3, Surface Pro 3 Firmware | 2024-11-21 | 3.6 LOW | 5.6 MEDIUM |
Microsoft Surface Pro 3 Security Feature Bypass Vulnerability | |||||
CVE-2021-42295 | 1 Microsoft | 2 365 Apps, Office | 2024-11-21 | 4.3 MEDIUM | 5.5 MEDIUM |
Visual Basic for Applications Information Disclosure Vulnerability | |||||
CVE-2021-42294 | 1 Microsoft | 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server | 2024-11-21 | 6.5 MEDIUM | 7.2 HIGH |
Microsoft SharePoint Server Remote Code Execution Vulnerability | |||||
CVE-2021-42293 | 1 Microsoft | 2 365 Apps, Office | 2024-11-21 | 5.0 MEDIUM | 6.5 MEDIUM |
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability | |||||
CVE-2021-42288 | 1 Microsoft | 3 Windows 10, Windows Server 2016, Windows Server 2019 | 2024-11-21 | 3.6 LOW | 5.7 MEDIUM |
Windows Hello Security Feature Bypass Vulnerability |