Total
420765 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2021-33647 | 1 Mindspore | 1 Mindspore | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers. | |||||
| CVE-2021-33646 | 3 Fedoraproject, Feep, Openatom | 3 Fedora, Libtar, Openeuler | 2026-06-17 | N/A | 7.5 HIGH |
| The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak. | |||||
| CVE-2021-33645 | 3 Fedoraproject, Feep, Openatom | 3 Fedora, Libtar, Openeuler | 2026-06-17 | N/A | 7.5 HIGH |
| The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak. | |||||
| CVE-2021-33644 | 3 Fedoraproject, Feep, Openatom | 3 Fedora, Libtar, Openeuler | 2026-06-17 | N/A | 8.1 HIGH |
| An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read. | |||||
| CVE-2021-33642 | 1 Openeuler | 1 Byacc | 2026-06-17 | N/A | 5.5 MEDIUM |
| When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function. | |||||
| CVE-2021-33641 | 1 Openeuler | 1 Byacc | 2026-06-17 | N/A | 7.8 HIGH |
| When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free). | |||||
| CVE-2021-33640 | 2 Fedoraproject, Openatom | 2 Fedora, Openeuler | 2026-06-17 | N/A | 6.2 MEDIUM |
| After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free). | |||||
| CVE-2021-33639 | 1 Openatom | 1 Openeuler Kernel | 2026-06-17 | N/A | 7.5 HIGH |
| REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified. | |||||
| CVE-2021-33638 | 1 Openeuler | 1 Isula | 2026-06-17 | N/A | 8.4 HIGH |
| When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container. | |||||
| CVE-2021-33637 | 1 Openeuler | 1 Isula | 2026-06-17 | N/A | 8.4 HIGH |
| When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container. | |||||
| CVE-2021-33636 | 1 Openeuler | 1 Isula | 2026-06-17 | N/A | 8.4 HIGH |
| When the isula load command is used to load malicious images, attackers can execute arbitrary code. | |||||
| CVE-2021-33635 | 1 Openeuler | 1 Isula | 2026-06-17 | N/A | 9.8 CRITICAL |
| When malicious images are pulled by isula pull, attackers can execute arbitrary code. | |||||
| CVE-2021-33634 | 1 Openeuler | 1 Icr | 2026-06-17 | N/A | 6.3 MEDIUM |
| iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS. | |||||
| CVE-2021-33633 | 2026-06-17 | N/A | 7.3 HIGH | ||
| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects aops-ceres: from 1.3.0 through 1.4.1. | |||||
| CVE-2021-33632 | 2026-06-17 | N/A | 7.0 HIGH | ||
| Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2. | |||||
| CVE-2021-33631 | 1 Openatom | 1 Openeuler | 2026-06-17 | N/A | 5.5 MEDIUM |
| Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0. | |||||
| CVE-2021-33630 | 1 Openatom | 1 Openeuler | 2026-06-17 | N/A | 5.5 MEDIUM |
| NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3. | |||||
| CVE-2021-33629 | 1 Openeuler | 1 Isula-build | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data. | |||||
| CVE-2021-33623 | 3 Debian, Netapp, Trim-newlines Project | 3 Debian Linux, E-series Performance Analyzer, Trim-newlines | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method. | |||||
| CVE-2021-33622 | 1 Sylabs | 2 Singularity, Singularitypro | 2026-06-17 | 6.8 MEDIUM | 9.8 CRITICAL |
| Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value. | |||||