Browse CVEs

MEDIUM 5.3 CVE-2021-35494 The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperRepor… Jasperreports Server after 7.9.0 Fix from $1,6002021-10-12 HIGH 7.0 CVE-2021-0688 In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privile… Android Patch available Fix from $1,9502021-10-06 MEDIUM 6.4 CVE-2021-1958 A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivit… Qca6574a Firmware Patch available Fix from $1,6002021-09-09 MEDIUM 6.3 CVE-2021-30714 A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An application may be able to cause une… Ipados 14.6+ Fix from $1,6002021-09-08 MEDIUM 5.9 CVE-2021-1884 A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, … Ipados 7.4 / 10.14.6+ Fix from $1,6002021-09-08 MEDIUM 6.4 CVE-2021-22004 An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that f… Fedora 3000.3+ Fix from $1,6002021-09-08 HIGH 7.0 CVE-2021-30652 A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave,… Ipados 7.4 / 11.3+ Fix from $1,9502021-09-08 HIGH 7.0 CVE-2021-30786 A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Opening a maliciously crafted PDF f… Iphone Os 11.5 / 14.7+ Fix from $1,9502021-09-08 HIGH 7.8 CVE-2021-28701 Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain … Debian Linux Mitigation only Fix from $1,9502021-09-08 HIGH 7.0 CVE-2021-40490 A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. Linux Kernel 4.4.284 / 4.9.283+ Fix from $1,9502021-09-03 MEDIUM 5.1 CVE-2021-31797 The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to passwo… Credential Provider 12.1+ Fix from $1,6002021-09-02 HIGH 7.8 CVE-2021-28697 grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority o… Fedora after 4.15.0 Fix from $1,9502021-08-27 HIGH 7.5 CVE-2021-30603 Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 92.0.4515.159+ Fix from $1,9502021-08-26 HIGH 7.0 CVE-2021-30995 A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Up… Ipados 8.3 / 10.15.7+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-30996 A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious applic… Ipados 12.1 / 15.2+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-31004 A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to… macOS 11.5+ Fix from $1,9502021-08-24 MEDIUM 5.9 CVE-2021-30982 A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11… Mac Os X 10.15.7 / 11.6.2+ Fix from $1,6002021-08-24 HIGH 7.5 CVE-2021-30984 A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS … Safari 8.3 / 12.1+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-30955 A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS … Ipados 8.3 / 12.1+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-30933 A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious applicatio… macOS 11.6+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-30923 A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute ar… Ipados 12.0.1 / 15.1+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-30899 A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS B… Mac Os X 10.15.7 / 11.6.1+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-30868 A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A malicious application may… macOS 11.6.1+ Fix from $1,9502021-08-24 HIGH 7.0 CVE-2021-30857 A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iO… Ipados 8.0 / 10.15.7+ Fix from $1,9502021-08-24 HIGH 8.1 CVE-2021-29986 A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Lin… Firefox 78.13.0 / 91.0+ Fix from $1,9502021-08-17 MEDIUM 6.4 CVE-2021-3573 A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other wa… Linux Kernel 5.13+ Fix from $1,6002021-08-13 HIGH 7.5 CVE-2021-38587 In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586). Cpanel 96.0.13+ Fix from $1,9502021-08-11 MEDIUM 5.9 CVE-2021-36221 Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort. Go 1.15.15 / 1.16.7+ Fix from $1,6002021-08-08 MEDIUM 5.9 CVE-2021-38191 An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread. Tokio 1.5.1 / 1.6.3+ Fix from $1,6002021-08-08 HIGH 8.1 CVE-2020-36437 An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and Sync for QueueSender<T>. Conqueue 0.4.0+ Fix from $1,9502021-08-08