2021 CVEs (page 100)
Page 100 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42556 | Medium | 5.5 | 2021-10-22 | Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker… |
CVE-2021-41171 | Medium | 5.9 | 2021-10-22 | eLabFTW is an open source electronic lab notebook manager for research teams. In versions of eLabFTW before 4.1.0, it allows attackers to bypass a brute-force… |
CVE-2021-29835 | Medium | 6.1 | 2021-10-22 | IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… |
CVE-2021-42836 | High | 7.5 | 2021-10-22 | GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack. |
CVE-2021-42542 | High | 8.0 | 2021-10-22 | The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure. |
CVE-2021-42540 | High | 8.0 | 2021-10-22 | The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the set… |
CVE-2021-42539 | High | 8.0 | 2021-10-22 | The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings c… |
CVE-2021-42538 | High | 8.0 | 2021-10-22 | The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input. |
CVE-2021-42536 | High | 8.0 | 2021-10-22 | The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables. |
CVE-2021-42534 | Medium | 6.3 | 2021-10-22 | The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the in… |
CVE-2021-42169 | Critical | 9.8 | 2021-10-22 | The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code (by: oretnom23 ) is vulnerable from remote SQL-Injection-Bypass-Authent… |
CVE-2021-38485 | High | 8.0 | 2021-10-22 | The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any… |
CVE-2021-30359 | High | 7.8 | 2021-10-22 | The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Ins… |
CVE-2021-0870 | High | 8.1 | 2021-10-22 | In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no addition… |
CVE-2021-0708 | High | 7.8 | 2021-10-22 | In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation… |
CVE-2021-0706 | Medium | 5.5 | 2021-10-22 | In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to… |
CVE-2021-0705 | High | 7.8 | 2021-10-22 | In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of… |
CVE-2021-0703 | Medium | 6.8 | 2021-10-22 | In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the a… |
CVE-2021-0702 | Medium | 5.5 | 2021-10-22 | In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local in… |
CVE-2021-0652 | High | 7.8 | 2021-10-22 | In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. T… |
CVE-2021-0651 | Medium | 5.5 | 2021-10-22 | In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could le… |
CVE-2021-0643 | Medium | 5.5 | 2021-10-22 | In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missin… |
CVE-2021-0483 | High | 7.8 | 2021-10-22 | In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User ex… |
CVE-2021-41747 | Medium | 6.1 | 2021-10-22 | Cross-Site Scripting (XSS) vulnerability exists in Csdn APP 4.10.0, which can be exploited by attackers to obtain sensitive information such as user cookies. |
CVE-2021-41745 | Critical | 9.8 | 2021-10-22 | ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions. |
CVE-2021-41744 | Critical | 9.8 | 2021-10-22 | All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM (Product Life Cycle Management) is a strategic management method. It applies a… |
CVE-2021-38481 | High | 8.1 | 2021-10-22 | The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the fun… |
CVE-2021-38479 | Medium | 6.5 | 2021-10-22 | Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API f… |
CVE-2021-38477 | Critical | 9.8 | 2021-10-22 | There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulation and/or the de… |
CVE-2021-38475 | High | 7.3 | 2021-10-22 | The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissions. |
CVE-2021-38473 | High | 8.0 | 2021-10-22 | The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow. |
CVE-2021-38471 | Critical | 9.1 | 2021-10-22 | There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files. |
CVE-2021-38469 | Critical | 9.1 | 2021-10-22 | Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path… |
CVE-2021-38467 | High | 7.3 | 2021-10-22 | A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed… |
CVE-2021-38465 | High | 8.0 | 2021-10-22 | The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating lar… |
CVE-2021-38463 | High | 7.3 | 2021-10-22 | The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions. |
CVE-2021-38461 | High | 8.2 | 2021-10-22 | The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries. |
CVE-2021-38459 | High | 8.1 | 2021-10-22 | The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is po… |
CVE-2021-38457 | Critical | 9.8 | 2021-10-22 | The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without providing any form o… |
CVE-2021-38455 | High | 7.3 | 2021-10-22 | The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner calls without check… |
CVE-2021-38453 | Critical | 9.1 | 2021-10-22 | Some API functions allow interaction with the registry, which includes reading values as well as data modification. |
CVE-2021-38451 | Medium | 4.8 | 2021-10-22 | The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply paramet… |
CVE-2021-38449 | Critical | 9.8 | 2021-10-22 | Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memo… |
CVE-2021-36357 | Critical | 9.8 | 2021-10-22 | An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type… |
CVE-2021-35230 | Medium | 6.7 | 2021-10-22 | As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by ins… |
CVE-2021-31682 | Medium | 6.1 | 2021-10-22 | The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operator… |
CVE-2021-31835 | Medium | 4.8 | 2021-10-22 | Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTM… |
CVE-2021-31834 | Medium | 5.4 | 2021-10-22 | Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script… |
CVE-2021-34362 | High | 8.7 | 2021-10-22 | A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attacke… |
CVE-2021-41169 | Medium | 6.2 | 2021-10-21 | Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attac… |
CVE-2021-41127 | High | 7.3 | 2021-10-21 | Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functional… |
CVE-2021-36869 | Medium | 4.8 | 2021-10-21 | Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post. |
CVE-2021-27746 | Medium | 5.4 | 2021-10-21 | "HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability" |
CVE-2021-41168 | Medium | 6.5 | 2021-10-21 | Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudown was found to be vu… |
CVE-2021-40719 | Critical | 9.8 | 2021-10-21 | Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF mes… |
CVE-2021-39357 | Medium | 5.5 | 2021-10-21 | The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the ~/class.php file… |
CVE-2021-39356 | Medium | 5.5 | 2021-10-21 | The Content Staging WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via several parameters that… |
CVE-2021-39354 | Medium | 4.8 | 2021-10-21 | The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end_date parameters found in the ~/include… |
CVE-2021-39352 | High | 7.2 | 2021-10-21 | The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php… |
CVE-2021-39348 | Medium | 5.5 | 2021-10-21 | The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/a… |
CVE-2021-39328 | Medium | 5.5 | 2021-10-21 | The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable… |
CVE-2021-39321 | High | 8.8 | 2021-10-21 | Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_sss_import_config AJAX action due to de… |
CVE-2021-22034 | High | 7.5 | 2021-10-21 | Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability. |
CVE-2021-42716 | High | 7.1 | 2021-10-21 | An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer… |
CVE-2021-42715 | Medium | 5.5 | 2021-10-21 | An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length… |
CVE-2021-41160 | Medium | 5.3 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger… |
CVE-2021-41159 | Medium | 5.8 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gate… |
CVE-2021-41146 | High | 8.8 | 2021-10-21 | qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a… |
CVE-2021-35228 | Medium | 5.5 | 2021-10-21 | This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a… |
CVE-2021-35227 | Medium | 4.7 | 2021-10-21 | The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available. |
CVE-2021-35225 | Medium | 5.0 | 2021-10-21 | Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers… |
CVE-2021-42327 | Medium | 6.7 | 2021-10-21 | dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by… |
CVE-2021-29883 | Medium | 4.3 | 2021-10-21 | IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on authorization tokens or session cookie… |
CVE-2021-29873 | High | 8.1 | 2021-10-21 | IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulne… |
CVE-2021-28496 | Medium | 5.7 | 2021-10-21 | On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectiona… |
CVE-2021-20120 | High | 8.8 | 2021-10-21 | The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker c… |
CVE-2021-28975 | Medium | 6.1 | 2021-10-21 | WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_para… |
CVE-2021-42740 | Critical | 9.8 | 2021-10-21 | The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to su… |
CVE-2021-35512 | Medium | 6.5 | 2021-10-21 | An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200. |
CVE-2021-41792 | Medium | 5.3 | 2021-10-21 | An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted H… |
CVE-2021-41791 | Medium | 5.4 | 2021-10-21 | An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input… |
CVE-2021-41790 | High | 8.8 | 2021-10-21 | An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of… |
CVE-2021-42108 | High | 7.8 | 2021-10-21 | Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-42107 | High | 7.8 | 2021-10-21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Se… |
CVE-2021-42106 | High | 7.8 | 2021-10-21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Se… |
CVE-2021-42105 | High | 7.8 | 2021-10-21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Se… |
CVE-2021-42104 | High | 7.8 | 2021-10-21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Se… |
CVE-2021-42103 | High | 7.8 | 2021-10-21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on af… |
CVE-2021-42102 | High | 7.8 | 2021-10-21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privilege… |
CVE-2021-42101 | High | 7.8 | 2021-10-21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on af… |
CVE-2021-42012 | High | 7.8 | 2021-10-21 | A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attack… |
CVE-2021-42011 | High | 7.8 | 2021-10-21 | An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated pr… |
CVE-2021-23139 | High | 7.5 | 2021-10-21 | A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected ins… |
CVE-2021-40123 | Medium | 4.3 | 2021-10-21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative… |
CVE-2021-40122 | Medium | 5.9 | 2021-10-21 | A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… |
CVE-2021-40121 | Medium | 6.1 | 2021-10-21 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site… |
CVE-2021-39127 | Medium | 5.3 | 2021-10-21 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint via a Broken Access Control vul… |
CVE-2021-39126 | Medium | 6.5 | 2021-10-21 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerabi… |
CVE-2021-34789 | Medium | 4.8 | 2021-10-21 | A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting… |
CVE-2021-34760 | Medium | 4.8 | 2021-10-21 | A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote attacker to co… |