Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 23:06Z
2021-03-31
2021-03-31 18:15Z
MED

CVE-2021-21983 — Vmware Cloud_foundation: Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21983

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system. CVSSv3.1 6.5 (MEDIUM) · EPSS 99th percentile

VNDVmwareVNDArbitraryTYPVulnerability
6.5
CVSS v3.1
100
Edit Score
2021-03-31
2021-03-31 18:15Z
HIGH

CVE-2021-21975 — Vmware Cloud_foundation: Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21975in the wild

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials. CVSSv3.1 7.5 (HIGH) · EPSS 100th percentile

CWECWE 918VNDVmwareTYPVulnerabilitySTAitw exploited
7.5
CVSS v3.1
100
Edit Score
2021-03-25
2021-03-25 16:15Z
HIGH

CVE-2021-22659 — Rockwellautomation Micrologix_1400_firmware: Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22659

Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user. CVSSv3.1 8.6 (HIGH) · EPSS 72th percentile

CWECWE 120VNDRockwellautomationVNDRockwellTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-03-25
2021-03-25 15:15Z
HIGH

CVE-2021-3450 — Openssl Openssl: The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-3450

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates CVSSv3.1 7.4 (HIGH) · EPSS 97th percentile

CWECWE 295VNDOpensslVNDX509 V Flag X509 StrictTYPVulnerability
7.4
CVSS v3.1
93
Edit Score
2021-03-25
2021-03-25 15:15Z
MED

CVE-2021-3449 — Openssl Openssl: If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the defau CVSSv3.1 5.9 (MEDIUM) · EPSS 99th percentile

CWECWE 476VNDOpensslTYPVulnerability
5.9
CVSS v3.1
99
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21351 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21351

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you CVSSv3.1 5.4 (MEDIUM) · EPSS 100th percentile

CWECWE 434CWECWE 502VNDApacheVNDNetappTYPVulnerability
5.4
CVSS v3.1
100
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21350 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability which may allow a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21350

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at l CVSSv3.1 5.3 (MEDIUM) · EPSS 97th percentile

CWECWE 434CWECWE 502VNDApacheVNDNetappTYPVulnerability
5.3
CVSS v3.1
81
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21349 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability which may allow a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21349

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the CVSSv3.1 6.1 (MEDIUM) · EPSS 99th percentile

CWECWE 502CWECWE 918VNDApacheVNDNetappTYPVulnerability
6.1
CVSS v3.1
95
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21348 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability which may allow a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21348

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at lea CVSSv3.1 5.3 (MEDIUM) · EPSS 96th percentile

CWECWE 502CWECWE 400VNDApacheVNDNetappTYPVulnerability
5.3
CVSS v3.1
81
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21347 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability which may allow a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21347

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framewor CVSSv3.1 6.1 (MEDIUM) · EPSS 97th percentile

CWECWE 434CWECWE 502VNDApacheVNDNetappTYPVulnerability
6.1
CVSS v3.1
85
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21346 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability which may allow a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21346

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framewor CVSSv3.1 6.1 (MEDIUM) · EPSS 100th percentile

CWECWE 434CWECWE 502VNDApacheVNDNetappTYPVulnerability
6.1
CVSS v3.1
100
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21345 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability which may allow a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21345

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Fram CVSSv3.1 5.8 (MEDIUM) · EPSS 99th percentile

CWECWE 94CWECWE 502CWECWE 78VNDApacheVNDNetappTYPVulnerability
5.8
CVSS v3.1
100
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21344 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is a vulnerability which may allow a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21344

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framewor CVSSv3.1 5.3 (MEDIUM) · EPSS 100th percentile

CWECWE 434CWECWE 502VNDApacheVNDNetappTYPVulnerability
5.3
CVSS v3.1
99
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21343 — Netapp Oncommand_insight: An attacker can manipulate the processed input stream and replace or inject objects, that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21343

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected CVSSv3.1 5.3 (MEDIUM) · EPSS 99th percentile

CWECWE 502CWECWE 73VNDApacheVNDNetappTYPVulnerability
5.3
CVSS v3.1
90
Edit Score
2021-03-23
2021-03-23 00:15Z
MED

CVE-2021-21342 — Netapp Oncommand_insight: An attacker can manipulate the processed input stream and replace or inject objects, that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21342

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in a server-side forgery request. No user is affected, who follo CVSSv3.1 5.3 (MEDIUM) · EPSS 99th percentile

CWECWE 502CWECWE 918VNDApacheVNDNetappTYPVulnerability
5.3
CVSS v3.1
91
Edit Score
2021-03-23
2021-03-23 00:15Z
HIGH

CVE-2021-21341 — Netapp Oncommand_insight: In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-21341

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minima CVSSv3.1 7.5 (HIGH) · EPSS 100th percentile

CWECWE 502CWECWE 400VNDApacheVNDNetappTYPVulnerability
7.5
CVSS v3.1
100
Edit Score
2021-03-15
2021-03-15 17:15Z
HIGH

CVE-2021-25667 — Siemens Ruggedcom_rm1224_firmware: Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-25667

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 787CWECWE 121VNDSiemensTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-03-12
2021-03-12 19:15Z
CRIT

CVE-2021-20232 — Gnu Gnutls: A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-20232

A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDGnuVNDFedoraprojectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-03-12
2021-03-12 19:15Z
CRIT

CVE-2021-20231 — Gnu Gnutls: A use after free issue in client sending key_share extension may lead to memory

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-20231

A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences. CVSSv3.1 9.8 (CRITICAL) · EPSS 90th percentile

CWECWE 416VNDGnuVNDFedoraprojectVNDNetappTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-27085 — Microsoft Internet_explorer: Internet Explorer Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27085in the wild

Internet Explorer Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 89th percentile

VNDMicrosoftVNDInternetTYPVulnerabilitySTAitw exploited
8.8
CVSS v3.1
95
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-27084 — Microsoft Maven_for_java: Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile

VNDMicrosoftVNDVisualTYPVulnerability
7.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-27083 — Microsoft Remote_development: Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27083

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile

VNDMicrosoftVNDDevelopmentTYPVulnerability
7.8
CVSS v3.1
100
Edit Score
2021-03-11
2021-03-11 16:15Z
CRIT

CVE-2021-27080 — Microsoft Azure_sphere: Azure Sphere Unsigned Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27080

Azure Sphere Unsigned Code Execution Vulnerability CVSSv3.1 9.3 (CRITICAL) · EPSS 66th percentile

VNDMicrosoftVNDAzureTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-27076 — Microsoft Business_productivity_servers: SharePoint Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27076

Microsoft SharePoint Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 96th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
98
Edit Score
2021-03-11
2021-03-11 16:15Z
HIGH

CVE-2021-27059 — Microsoft Office: Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27059in the wild

Microsoft Office Remote Code Execution Vulnerability CVSSv3.1 7.6 (HIGH) · EPSS 87th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.6
CVSS v3.1
89
Edit Score