Vulnerabilities (CVE)

Filtered by CWE-668
Total 700 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45708 1 Abomonation Project 1 Abomonation 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass.
CVE-2021-45402 1 Linux 1 Linux Kernel 2026-06-17 2.1 LOW 5.5 MEDIUM
The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."
CVE-2021-44523 1 Siemens 2 Sipass Integrated, Siveillance Identity 2026-06-17 6.4 MEDIUM 9.1 CRITICAL
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal activity feed database. This could allow an unauthenticated remote attacker to read, modify or delete activity feed entries.
CVE-2021-44522 1 Siemens 2 Sipass Integrated, Siveillance Identity 2026-06-17 5.0 MEDIUM 7.5 HIGH
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal message broker system. This could allow an unauthenticated remote attacker to subscribe to arbitrary message queues.
CVE-2021-44049 1 Cyberark 1 Endpoint Privilege Manager 2026-06-17 6.9 MEDIUM 7.8 HIGH
CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory.
CVE-2021-43893 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 6.0 MEDIUM 7.5 HIGH
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
CVE-2021-43560 2 Fedoraproject, Moodle 3 Extra Packages For Enterprise Linux, Fedora, Moodle 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.
CVE-2021-43216 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 6.8 MEDIUM 6.5 MEDIUM
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVE-2021-43066 1 Fortinet 1 Forticlient 2026-06-17 4.6 MEDIUM 8.4 HIGH
A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer.
CVE-2021-42749 1 Fastlinemedia 1 Beaver Themer 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set.
CVE-2021-42714 2 Microsoft, Splashtop 2 Windows, Splashtop 2026-06-17 7.2 HIGH 7.8 HIGH
Splashtop Remote Client (Business Edition) through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-42713 2 Microsoft, Splashtop 2 Windows, Splashtop 2026-06-17 7.2 HIGH 7.8 HIGH
Splashtop Remote Client (Personal Edition) through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-42712 1 Splashtop 1 Streamer 2026-06-17 7.2 HIGH 7.8 HIGH
Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-42536 1 Emerson 6 Wireless 1410 Gateway, Wireless 1410 Gateway Firmware, Wireless 1410d Gateway and 3 more 2026-06-17 4.0 MEDIUM 8.0 HIGH
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.
CVE-2021-42255 1 Blueplanet-works 1 Appguard 2026-06-17 7.2 HIGH 7.8 HIGH
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user.
CVE-2021-42254 1 Beyondtrust 1 Privilege Management For Windows 2026-06-17 7.2 HIGH 7.8 HIGH
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-41989 1 Qlik 1 Qlikview 2026-06-17 N/A 7.8 HIGH
Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-41988 1 Qlik 1 Nprinting Designer 2026-06-17 N/A 7.8 HIGH
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-41065 1 Bopsoft 1 Listary 2026-06-17 4.4 MEDIUM 7.3 HIGH
An issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary.listaryService named pipe and wait for a privileged user to open a session on the Listary installed host. Listary will automatically access the named pipe and the attacker will be able to duplicate the victim's token to impersonate him. This exploit is valid in certain Windows versions (Microsoft has patched the issue in later Windows 10 builds).
CVE-2021-40497 1 Sap 1 Businessobjects Analysis 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation could lead to exposure of some system specific data like its version.