Cloud Backup

CVEs (349)

• CVE-2021-0111MedFeb 9, 2022
  Intel

  Processors
  risk 0.44cvss 6.7epss 0.00

  NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2021-0107MedFeb 9, 2022
  Intel

  Processors
  risk 0.44cvss 6.7epss 0.00

  Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2021-0103MedFeb 9, 2022
  Intel

  Processors
  risk 0.44cvss 6.7epss 0.00

  Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2020-8703MedJun 9, 2021
  Intel

  CSME
  risk 0.44cvss 6.7epss 0.00

  Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2020-8700MedJun 9, 2021
  Intel

  Processors
  risk 0.44cvss 6.7epss 0.00

  Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2020-12359MedJun 9, 2021
  Intel

  Processors
  risk 0.44cvss 6.8epss 0.00

  Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

• CVE-2020-12357MedJun 9, 2021
  Intel

  Processors
  risk 0.44cvss 6.7epss 0.00

  Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2021-23133MedApr 22, 2021
  Linux

  Kernel
  risk 0.44cvss 6.7epss 0.00

  A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is…

• CVE-2020-15436MedNov 23, 2020
  Linux

  Kernel
  risk 0.44cvss 6.7epss 0.01

  Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

• CVE-2020-8757MedNov 12, 2020
  Intel

  AMT
  risk 0.44cvss 6.7epss 0.00

  Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2020-8738MedNov 12, 2020
  Intel

  BIOS
  risk 0.44cvss 6.7epss 0.00

  Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2019-16905HigOct 9, 2019
  OpenSSH

  OpenSSH
  risk 0.44cvss 7.8epss 0.02

  OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the…

• CVE-2017-10274MedOct 19, 2017
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.44cvss 6.8epss 0.03

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

• CVE-2017-10198MedAug 8, 2017
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.44cvss 6.8epss 0.03

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows…

• CVE-2021-0125MedFeb 9, 2022
  Intel

  Processors
  risk 0.43cvss 6.6epss 0.00

  Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

• CVE-2021-0124MedFeb 9, 2022
  Intel

  Processors
  risk 0.43cvss 6.6epss 0.00

  Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

• CVE-2021-0060MedFeb 9, 2022
  Intel

  SPS
  risk 0.43cvss 6.6epss 0.00

  Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, SPS_E5_03.01.03.116.0, SPS_E3_05.01.04.309.0, SPS_02.04.00.101.0, SPS_SoC-A_05.00.03.114.0, SPS_SoC-X_04.00.04.326.0,…

• CVE-2021-3634MedAug 31, 2021
  Libssh

  Libssh
  risk 0.43cvss 6.5epss 0.05

  A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange,…

• CVE-2021-25214MedApr 29, 2021
  Isc

  Bind
  risk 0.43cvss 6.5epss 0.06

  In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of…

• CVE-2019-5108MedDec 23, 2019
  Linux

  Kernel
  risk 0.43cvss 6.5epss 0.10

  An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to…