CVE-2021-0527

🗓️ 21 Jun 2021 16:01:41Reported by google_androidType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 81 Views🌐 WEB

In memory management driver, possible memory corruption due to use after free. Local privilege escalation with no additional execution privileges needed

Reporter	Title	Published	Views	Family All 11
0day.today	Pandora FMS 6.0SP3 Cross Site Scripting Vulnerability	27 May 202100:00	–	zdt
Android Security Bulletins	Android Security Bulletin—June 2021Stay organized with collectionsSave and categorize content based on your preferences.	7 Jun 202100:00	–	androidsecurity
Circl	CVE-2021-0527	22 Jun 202102:48	–	circl
CNNVD	Google Android 资源管理错误漏洞	27 May 202100:00	–	cnnvd
Cvelist	CVE-2021-0527	21 Jun 202116:01	–	cvelist
EUVD	EUVD-2021-3146	3 Oct 202520:07	–	euvd
NVD	CVE-2021-0527	21 Jun 202117:15	–	nvd
OSV	ASB-A-185193931	1 Jun 202100:00	–	osv
Packet Storm	Pandora FMS 6.0SP3 Cross Site Scripting	27 May 202100:00	–	packetstorm
Prion	Memory corruption	21 Jun 202117:15	–	prion

NVD

Node

google androidMatch-

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android SoC"
      }
    ]
  }
]

Source	Link
source	www.source.android.com/security/bulletin/2021-06-01

Parameter	Position	Path	Description	CWE
keywords	query param	pandorafms-6.0SP3/pandora_console/index.php	XSS vulnerability via keywords search parameter in Pandora FMS 6.0 SP3 pandora_console index.php	CWE-416
head_search_keywords	query param	pandorafms-6.0SP3/pandora_console/index.php	XSS vulnerability via keywords search parameter in Pandora FMS 6.0 SP3 pandora_console index.php	CWE-416

21 Nov 2024 05:42Current

7.8High risk

Vulners AI Score7.8

CVSS 24.6

CVSS 3.17.8

EPSS0.00019

CWE-416