CVEs published March 17, 2021
38 CVEs were published on March 17, 2021: 2 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 38
- Critical
- 2
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 36
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 20
- Excellent Infotek e-document system
- 2
- Advantech Spectre RT ERT351
- 1
- Advantech Spectre RT ERT351 Versions 5.1.3 and prior
- 1
- Advantech Spectre RT Industrial Routers ERT351
- 1
- Apache Software Foundation Apache Ambari
- 1
- Apache Software Foundation Apache Subversion
- 1
- pygments
- 1
- Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- 1
- ua-parser-js
- 1
Critical 2
Medium, low and unrated 36
- CVE-2019-18235Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may…Advantech Spectre RT ERT351 Versions 5.1.3 and prior
- CVE-2019-18231Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker…Advantech Spectre RT ERT351
- CVE-2019-18233In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the…Advantech Spectre RT Industrial Routers ERT351
- CVE-2020-17457Fujitsu ServerView Suite iRMC before 9.62F allows XSS.
- CVE-2020-35454The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup…
- CVE-2020-35455The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences…
- CVE-2020-35456The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via…
- CVE-2021-27292ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service.ua-parser-js
- CVE-2020-28873Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form.
- CVE-2021-27291In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions.pygments
- CVE-2020-17525Remote unauthenticated denial-of-service in Subversion mod_authz_svnApache Software Foundation Apache Subversion
- CVE-2020-13924In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other…Apache Software Foundation Apache Ambari
- CVE-2020-11309Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11305Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT…Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2020-11308Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11299Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11290Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11228Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11230Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11227Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11226Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11222Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11220While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11221Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11218Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
Show all 36 entriesShow fewer entries
- CVE-2020-11192Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11199HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11190Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11189Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11186Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11188Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11171Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11166Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2017-20002The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty.
- CVE-2021-28650autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal…
- CVE-2021-28660rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the…