Поиск уязвимостей
Количество 35 555
Количество 35 555
CVE-2021-41495
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing an error can only occur due to an exhaustion of memory. If the user can exhaust memory they are already privileged. Further it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place
CVE-2021-4148
A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem.
CVE-2021-4145
CVE-2021-41379
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-41378
Windows NTFS Remote Code Execution Vulnerability
CVE-2021-41377
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVE-2021-41376
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41375
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41374
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41373
FSLogix Information Disclosure Vulnerability
CVE-2021-41372
Power BI Report Server Spoofing Vulnerability
CVE-2021-41371
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2021-41370
NTFS Elevation of Privilege Vulnerability
CVE-2021-4136
Heap-based Buffer Overflow in vim/vim
CVE-2021-41368
Microsoft Access Remote Code Execution Vulnerability
CVE-2021-41367
NTFS Elevation of Privilege Vulnerability
CVE-2021-41366
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
CVE-2021-41365
Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2021-41363
Intune Management Extension Security Feature Bypass Vulnerability
CVE-2021-41361
Active Directory Federation Server Spoofing Vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-41495 Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing an error can only occur due to an exhaustion of memory. If the user can exhaust memory they are already privileged. Further it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place | CVSS3: 5.3 | 1% Низкий | почти 5 лет назад | |
CVE-2021-4148 A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem. | CVSS3: 5.5 | 0% Низкий | больше 4 лет назад | |
0% Низкий | больше 3 лет назад | |||
CVE-2021-41379 Windows Installer Elevation of Privilege Vulnerability | CVSS3: 5.5 | 19% Средний | около 5 лет назад | |
CVE-2021-41378 Windows NTFS Remote Code Execution Vulnerability | CVSS3: 7.8 | 2% Низкий | около 5 лет назад | |
CVE-2021-41377 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | CVSS3: 7.8 | 0% Низкий | около 5 лет назад | |
CVE-2021-41376 Azure Sphere Information Disclosure Vulnerability | CVSS3: 2.3 | 1% Низкий | около 5 лет назад | |
CVE-2021-41375 Azure Sphere Information Disclosure Vulnerability | CVSS3: 4.4 | 1% Низкий | около 5 лет назад | |
CVE-2021-41374 Azure Sphere Information Disclosure Vulnerability | CVSS3: 6.7 | 1% Низкий | около 5 лет назад | |
CVE-2021-41373 FSLogix Information Disclosure Vulnerability | CVSS3: 5.5 | 1% Низкий | около 5 лет назад | |
CVE-2021-41372 Power BI Report Server Spoofing Vulnerability | CVSS3: 7.6 | 1% Низкий | около 5 лет назад | |
CVE-2021-41371 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | CVSS3: 4.4 | 2% Низкий | около 5 лет назад | |
CVE-2021-41370 NTFS Elevation of Privilege Vulnerability | CVSS3: 7.8 | 0% Низкий | около 5 лет назад | |
CVE-2021-4136 Heap-based Buffer Overflow in vim/vim | CVSS3: 7.8 | 2% Низкий | почти 5 лет назад | |
CVE-2021-41368 Microsoft Access Remote Code Execution Vulnerability | CVSS3: 6.1 | 5% Низкий | около 5 лет назад | |
CVE-2021-41367 NTFS Elevation of Privilege Vulnerability | CVSS3: 7.8 | 0% Низкий | около 5 лет назад | |
CVE-2021-41366 Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability | CVSS3: 7.8 | 0% Низкий | около 5 лет назад | |
CVE-2021-41365 Microsoft Defender for IoT Remote Code Execution Vulnerability | CVSS3: 8.8 | 3% Низкий | почти 5 лет назад | |
CVE-2021-41363 Intune Management Extension Security Feature Bypass Vulnerability | CVSS3: 4.2 | 0% Низкий | около 5 лет назад | |
CVE-2021-41361 Active Directory Federation Server Spoofing Vulnerability | CVSS3: 5.4 | 1% Низкий | около 5 лет назад |
Уязвимостей на страницу