21 April 2021

9 results · Clear filters · Feed

• Medium 5.5
  CVE-2021-1078

  NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sy…

  NVIDIA NVIDIA GPU Display Driver
  Apr 21, 2021
• Medium 5.7
  CVE-2021-29456

  Authelia allows open redirects on the logout endpoint

  Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal. In versions 4.27.4 and earlier, utilizing a HTTP query parameter an attacker is able to redir…

  authelia authelia github.com/authelia/authelia/v4 Go
  Apr 21, 2021
• Medium 4.3
  CVE-2021-21647

  Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds

  Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.

  Jenkins Project Jenkins CloudBees CD Plugin org.jenkins-ci.plugins:electricflow Web / CMS Maven
  Apr 21, 2021
• Medium 4.3
  CVE-2021-21645

  Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs

  Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Apr 21, 2021
• Medium 5.4
  CVE-2021-21644

  CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files

  A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Apr 21, 2021
• Medium 6.5
  CVE-2021-21643

  Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs

  Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Apr 21, 2021
• Medium 5.9
  CVE-2021-20501

  IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to t…

  IBM i
  Apr 21, 2021
• Medium 6.6
  CVE-2021-1076

  NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvldd…

  NVIDIA NVIDIA GPU Display Driver nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Debian Ubuntu
  Apr 21, 2021
• Medium 6.6
  CVE-2021-1077

  NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the softwa…

  NVIDIA NVIDIA GPU Display Driver nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Debian Ubuntu
  Apr 21, 2021