# CVEs published 2021-11-20

19 CVEs were published on November 20, 2021: 0 critical, 7 high. Days are UTC.

- [CVE-2021-34400](https://cve.now/CVE-2021-34400.md): NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gai (CVSS 4.1, NVIDIA GPU and Tegra hardware)
- [CVE-2021-34399](https://cve.now/CVE-2021-34399.md): NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gai (CVSS 4.1, NVIDIA GPU and Tegra hardware)
- [CVE-2021-23219](https://cve.now/CVE-2021-23219.md): NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to ac (CVSS 4.1, NVIDIA GPU and Tegra hardware)
- [CVE-2021-23217](https://cve.now/CVE-2021-23217.md): NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to in (CVSS 7.5, NVIDIA GPU and Tegra hardware)
- [CVE-2021-23201](https://cve.now/CVE-2021-23201.md): NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to gen (CVSS 7.5, NVIDIA GPU and Tegra hardware)
- [CVE-2021-1125](https://cve.now/CVE-2021-1125.md): NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to cor (CVSS 4.1, NVIDIA GPU and Tegra hardware)
- [CVE-2021-1105](https://cve.now/CVE-2021-1105.md): NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to acc (CVSS 4.1, NVIDIA GPU and Tegra hardware)
- [CVE-2021-1088](https://cve.now/CVE-2021-1088.md): NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to uti (CVSS 4.1, NVIDIA GPU and Tegra hardware)
- [CVE-2021-36340](https://cve.now/CVE-2021-36340.md): Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. (CVSS 7.8, Dell Secure Connect Gateway (SCG) 5.0 Application)
- [CVE-2021-36322](https://cve.now/CVE-2021-36322.md): Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. (CVSS 6.1, Dell Networking X-Series)
- [CVE-2021-36321](https://cve.now/CVE-2021-36321.md): Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. (CVSS 7.5, Dell Networking X-Series)
- [CVE-2021-36320](https://cve.now/CVE-2021-36320.md): Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. (CVSS 7.5, Dell Networking X-Series)
- [CVE-2021-36319](https://cve.now/CVE-2021-36319.md): Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. (CVSS 3.3, Dell Networking OS10)
- [CVE-2021-36310](https://cve.now/CVE-2021-36310.md): Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service (CVSS 4.9, Dell Networking OS10)
- [CVE-2021-36308](https://cve.now/CVE-2021-36308.md): Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. (CVSS 5.9, Dell Networking OS)
- [CVE-2021-36307](https://cve.now/CVE-2021-36307.md): Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. (CVSS 8.8, Dell Networking OS)
- [CVE-2021-36306](https://cve.now/CVE-2021-36306.md): Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. (CVSS 8.1, Dell Networking OS)
- [CVE-2021-38681](https://cve.now/CVE-2021-38681.md): Reflected XSS Vulnerability in Ragic Cloud DB (CVSS 5.3, Negocios Ragic Cloud DB)
- [CVE-2021-34358](https://cve.now/CVE-2021-34358.md): CSRF Vulnerability in QmailAgent (CVSS 6.8, QNAP Systems QmailAgent)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.