CVE-2021-46811

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-468127.5The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.CVE-2021-468137.5Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may CVE-2021-468147.5The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system avCVE-2021-468167.8Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage CVE-2021-468177.8Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverageCVE-2021-468187.8Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverageCVE-2021-468208.1Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.pCVE-2021-468225.5The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer anCVE-2021-468236.5python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regulaCVE-2021-468245.4Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update AccounCVE-2021-468259.1Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker aCVE-2021-468276.1An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in se
CVE-2021-46811: Medium severity, CVSS 5.3 | Vulnix