CVE-2021-33080

CVSS v3 Score
6.8
Medium
CVSS v2 Score
4.6
Medium

Vulnerability Description

Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.

CVSS:6.7(Medium)

Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi...

CVSS:6.6(Medium)

ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the ...

CVSS:6.5(Medium)

An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows ...

CVSS:6.5(Medium)

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers...

CVSS:6.5(Medium)

Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.

CVSS:6.5(Medium)

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.