Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 40 of 273.
- GSD-2021-1000075 cifs: fix regression when mounting shares with prefix paths
- GSD-2021-1000074 riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe
- GSD-2021-1000073 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free
- GSD-2021-1000072 openvswitch: fix stack OOB read while fragmenting IPv4 packets
- GSD-2021-1000071 virtiofs: fix memory leak in virtio_fs_probe()
- GSD-2021-1000070 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets
- GSD-2021-1000069 ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
- GSD-2021-1000068 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
- GSD-2021-1000067 md/raid1: properly indicate failure when ending a failed write request
- GSD-2021-1000066 tpm: efi: Use local variable for calculating final log size
- GSD-2021-1000065 sfc: farch: fix TX queue lookup in TX flush done handling
- GSD-2021-1000064 sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues
- GSD-2021-1000063 sfc: farch: fix TX queue lookup in TX event handling
- GSD-2021-1000062 ext4: fix check to prevent false positive report of incorrect used inodes
- GSD-2021-1000061 media: dvbdev: Fix memory leak in dvb_media_device_free()
- GSD-2021-1000060 ext4: always panic when errors=panic is specified
- GSD-2021-1000059 media: staging/intel-ipu3: Fix memory leak in imu_fmt
- GSD-2021-1000058 media: staging/intel-ipu3: Fix set_fmt error handling
- GSD-2021-1000057 io_uring: fix shared sqpoll cancellation hangs
- GSD-2021-1000056 usb: dwc3: core: Do core softreset when switch mode
- GSD-2021-1000055 tracing: Restructure trace_clock_global() to never block
- GSD-2021-1000054 tools/power turbostat: Fix offset overflow issue in index converting
- GSD-2021-1000053 dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
- GSD-2021-1000052 thermal/drivers/cpufreq_cooling: Fix slab OOB issue
- GSD-2021-1000050 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
- GSD-2021-1000049 net: hso: fix NULL-deref on disconnect regression
- GSD-2021-1000048 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
- GSD-2021-1000047 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
- GSD-2021-1000046 net: hso: fix NULL-deref on disconnect regression
- GSD-2021-1000045 KEYS: trusted: Fix TPM reservation for seal/unseal
- GSD-2021-1000044 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
- GSD-2021-1000043 net: hso: fix NULL-deref on disconnect regression
- GSD-2021-1000042 net: hso: fix NULL-deref on disconnect regression
- GSD-2021-1000041 KEYS: trusted: Fix TPM reservation for seal/unseal
- GSD-2021-1000039 ARM: footbridge: fix PCI interrupt mapping
- GSD-2021-1000038 netfilter: nft_limit: avoid possible divide error in nft_limit_init
- GSD-2021-1000037 ARM: footbridge: fix PCI interrupt mapping
- GSD-2021-1000036 ch_ktls: Fix kernel panic
- GSD-2021-1000035 net: Make tcp_allowed_congestion_control readonly in non-init netns
- GSD-2021-1000034 libbpf: Fix potential NULL pointer dereference
- GSD-2021-1000033 netfilter: nft_limit: avoid possible divide error in nft_limit_init
- GSD-2021-1000032 ixgbe: fix unbalanced device enable/disable in suspend/resume
- GSD-2021-1000031 dmaengine: idxd: fix wq cleanup of WQCFG registers
- GSD-2021-1000030 dmaengine: idxd: fix wq size store permission state
- GSD-2021-1000029 dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback
- GSD-2021-1000028 netfilter: nft_limit: avoid possible divide error in nft_limit_init
- GSD-2021-1000027 ixgbe: Fix NULL pointer dereference in ethtool loopback test
- GSD-2021-1000026 dmaengine: idxd: fix wq cleanup of WQCFG registers
- GSD-2021-1000025 dmaengine: idxd: clear MSIX permission entry on shutdown
- GSD-2021-1000024 dmaengine: idxd: fix wq size store permission state
- GSD-2021-1000023 dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback
- GSD-2021-1000022 KVM: VMX: Don't use vcpu->run->internal.ndata as an array index
- GSD-2021-1000021 bpf: Use correct permission flag for mixed signed bounds arithmetic
- GSD-2021-1000020 ARM: footbridge: fix PCI interrupt mapping
- GSD-2021-1000019 ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled
- GSD-2021-1000018 ch_ktls: Fix kernel panic
- GSD-2021-1000017 net: Make tcp_allowed_congestion_control readonly in non-init netns
- GSD-2021-1000016 libbpf: Fix potential NULL pointer dereference
- GSD-2021-1000015 netfilter: nftables: clone set element expression template
- GSD-2021-1000014 ixgbe: fix unbalanced device enable/disable in suspend/resume
- GSD-2021-1000013 kasan: remove redundant config option
- GSD-2021-1000012 KVM: VMX: Don't use vcpu->run->internal.ndata as an array index
- GSD-2021-1000011 bpf: Use correct permission flag for mixed signed bounds arithmetic
- GHSA-xxfh-x98p-j8fr Remote code injection in Log4j (through pax-logging-log4j2)
- GHSA-xx4c-jj58-r7x6 Inefficient Regular Expression Complexity in Validator.js
- GHSA-xmh9-rg6f-j3mr Verification flaw in Solid identity-token-verifier
- GHSA-xh2p-7p87-fhgh Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
- GHSA-x7p5-p2c9-phvg Unexpected database bindings
- GHSA-x5h4-9gqw-942j Improper Verification of Cryptographic Signature in aws-encryption-sdk
- GHSA-x5c7-x7m2-rhmf Local directory executable lookup in sops (Windows-only)
- GHSA-wq3r-jwrq-xg6w Canceling of orders not related to the logged-in user
- GHSA-wmpv-c2jp-j2xg ERC1155Supply vulnerability in OpenZeppelin Contracts
- GHSA-wfrj-qqc2-83cm Remote command injection when using sendmail email transport
- GHSA-w8fh-pvq2-x8c4 Malicious npm package: sonatype
- GHSA-w736-hf9p-qqh3 Key Caching behavior in the DynamoDB Encryption Client.
- GHSA-vjf8-9fx6-mv6x Triton VM Soundness Vulnerability due to Missing Constraint
- GHSA-v988-828w-xvf2 Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui
- GHSA-v935-pqmr-g8v9 Unexpected panics in num-bigint
- GHSA-rrqv-vjrw-hrcr Arbitrary Code Execution in json-ptr
- GHSA-rrfw-hg9m-j47h Signature Validation Bypass
- GHSA-rc7p-gmvh-xfx2 Attack on Kubernetes via Misconfigured Argo Workflows
- GHSA-r7cj-wmwv-hfw5 `BinaryArray` does not perform bound checks on reading values and offsets
- GHSA-r64m-qchj-hrjp Webcache Poisoning in shopware/platform and shopware/core
- GHSA-qxx8-292g-2w66 Improper Authentication
- GHSA-qv2g-99x4-45x6 Malicious npm package: discord-fix
- GHSA-qrmm-w75w-3wpx Server side request forgery in SwaggerUI
- GHSA-qrmm-w4v4-q7f8 Unauthorized access through URL manipulation
- GHSA-qmfx-75ff-8mw6 Listing of upload directory contents possible
- GHSA-qm7x-rc44-rrqw Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
- GHSA-qh54-9vc5-m9fg MD5 hash support in github.com/foxcpp/maddy
- GHSA-qgrp-8f3v-q85p `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets
- GHSA-qg7c-q3vq-rgxr Leak of information via Store-API aggregations in shopware/platform and shopware/core
- GHSA-qc22-qwm9-j8rx Remote Code Execution in npm-groovy-lint
- GHSA-q4h9-46xg-m3x9 UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable
- GHSA-q324-q795-2q5p Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name
- GHSA-prqf-xr2j-xf65 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client`
- GHSA-prmc-5v5w-c465 Client TLS credentials sent raw to server in npm package nats
- GHSA-pp8r-vv2j-9j5v traitobject is Unmaintained
- GHSA-pjj4-jjgc-h3r8 Authenticated remote code execution
- GHSA-p7mj-xvxg-grff `out_reference::Out::from_raw` should be `unsafe`