2021 CVEs (page 106)
Page 106 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20795 | High | 8.8 | 2021-10-13 | Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authent… |
CVE-2021-41363 | Medium | 4.2 | 2021-10-13 | Intune Management Extension Security Feature Bypass Vulnerability |
CVE-2021-41361 | Medium | 5.4 | 2021-10-13 | Active Directory Federation Server Spoofing Vulnerability |
CVE-2021-41357 | High | 7.8 | 2021-10-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-41355 | Medium | 5.7 | 2021-10-13 | .NET Core and Visual Studio Information Disclosure Vulnerability |
CVE-2021-41354 | Medium | 5.4 | 2021-10-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2021-41353 | Medium | 5.4 | 2021-10-13 | Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability |
CVE-2021-41352 | High | 7.5 | 2021-10-13 | SCOM Information Disclosure Vulnerability |
CVE-2021-41350 | Medium | 6.5 | 2021-10-13 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2021-41348 | High | 8.0 | 2021-10-13 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2021-41347 | High | 7.8 | 2021-10-13 | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
CVE-2021-41346 | Medium | 5.3 | 2021-10-13 | Console Window Host Security Feature Bypass Vulnerability |
CVE-2021-41345 | High | 7.8 | 2021-10-13 | Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-41344 | High | 8.1 | 2021-10-13 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2021-41343 | Medium | 5.5 | 2021-10-13 | Windows Fast FAT File System Driver Information Disclosure Vulnerability |
CVE-2021-41342 | Medium | 6.8 | 2021-10-13 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2021-41340 | High | 7.8 | 2021-10-13 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2021-41339 | Medium | 4.7 | 2021-10-13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2021-41338 | Medium | 5.5 | 2021-10-13 | Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability |
CVE-2021-41337 | Medium | 4.9 | 2021-10-13 | Active Directory Security Feature Bypass Vulnerability |
CVE-2021-41336 | Medium | 5.5 | 2021-10-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2021-41335 | High | 7.8 | 2021-10-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-41334 | High | 7.0 | 2021-10-13 | Windows Desktop Bridge Elevation of Privilege Vulnerability |
CVE-2021-41332 | Medium | 6.5 | 2021-10-13 | Windows Print Spooler Information Disclosure Vulnerability |
CVE-2021-41331 | High | 7.8 | 2021-10-13 | Windows Media Audio Decoder Remote Code Execution Vulnerability |
CVE-2021-41330 | High | 7.8 | 2021-10-13 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
CVE-2021-40489 | High | 7.8 | 2021-10-13 | Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-40488 | High | 7.8 | 2021-10-13 | Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-40487 | High | 8.1 | 2021-10-13 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2021-40486 | High | 7.8 | 2021-10-13 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2021-40485 | High | 7.8 | 2021-10-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-40484 | High | 7.6 | 2021-10-13 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-40483 | High | 7.6 | 2021-10-13 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-40482 | Medium | 5.3 | 2021-10-13 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2021-40481 | High | 7.1 | 2021-10-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2021-40480 | High | 7.8 | 2021-10-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2021-40479 | High | 7.8 | 2021-10-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-40478 | High | 7.8 | 2021-10-13 | Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-40477 | High | 7.8 | 2021-10-13 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-40476 | High | 7.5 | 2021-10-13 | Windows AppContainer Elevation Of Privilege Vulnerability |
CVE-2021-40475 | Medium | 5.5 | 2021-10-13 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
CVE-2021-40474 | High | 7.8 | 2021-10-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-40473 | High | 7.8 | 2021-10-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-40472 | Medium | 5.5 | 2021-10-13 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2021-40471 | High | 7.8 | 2021-10-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-40470 | High | 7.8 | 2021-10-13 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
CVE-2021-40469 | High | 7.2 | 2021-10-13 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-40468 | Medium | 5.5 | 2021-10-13 | Windows Bind Filter Driver Information Disclosure Vulnerability |
CVE-2021-40467 | High | 7.8 | 2021-10-13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2021-40466 | High | 7.8 | 2021-10-13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2021-40465 | High | 7.8 | 2021-10-13 | Windows Text Shaping Remote Code Execution Vulnerability |
CVE-2021-40464 | High | 8.0 | 2021-10-13 | Windows Nearby Sharing Elevation of Privilege Vulnerability |
CVE-2021-40463 | High | 7.7 | 2021-10-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2021-40462 | High | 7.8 | 2021-10-13 | Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability |
CVE-2021-40461 | High | 8.0 | 2021-10-13 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2021-40460 | Medium | 6.5 | 2021-10-13 | Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability |
CVE-2021-40457 | High | 7.4 | 2021-10-13 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability |
CVE-2021-40456 | Medium | 5.3 | 2021-10-13 | Windows AD FS Security Feature Bypass Vulnerability |
CVE-2021-40455 | Medium | 5.5 | 2021-10-13 | Windows Installer Spoofing Vulnerability |
CVE-2021-40454 | Medium | 5.5 | 2021-10-13 | Rich Text Edit Control Information Disclosure Vulnerability |
CVE-2021-40450 | High | 7.8 | 2021-10-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-40449 | High | 7.8 | 2021-10-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-40443 | High | 7.8 | 2021-10-13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2021-38672 | High | 8.0 | 2021-10-13 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2021-38663 | Medium | 5.5 | 2021-10-13 | Windows exFAT File System Information Disclosure Vulnerability |
CVE-2021-38662 | Medium | 5.5 | 2021-10-13 | Windows Fast FAT File System Driver Information Disclosure Vulnerability |
CVE-2021-36970 | High | 8.8 | 2021-10-13 | Windows Print Spooler Spoofing Vulnerability |
CVE-2021-36953 | High | 7.5 | 2021-10-13 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2021-34453 | High | 7.5 | 2021-10-13 | Microsoft Exchange Server Denial of Service Vulnerability |
CVE-2021-26442 | High | 7.0 | 2021-10-13 | Windows HTTP.sys Elevation of Privilege Vulnerability |
CVE-2021-26441 | High | 7.8 | 2021-10-13 | Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-26427 | Critical | 9.0 | 2021-10-13 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-20031 | Medium | 6.1 | 2021-10-12 | A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains. |
CVE-2021-3330 | High | 7.1 | 2021-10-12 | RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-o… |
CVE-2021-3323 | High | 8.3 | 2021-10-12 | Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions >= >=2.4.0 contain Integer Underflow (Wrap or Wraparound) (CWE-191). For more… |
CVE-2021-3322 | Medium | 6.5 | 2021-10-12 | Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more infor… |
CVE-2021-3321 | High | 7.5 | 2021-10-12 | Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680)… |
CVE-2021-42325 | Critical | 9.8 | 2021-10-12 | Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name. |
CVE-2021-42326 | Medium | 5.3 | 2021-10-12 | Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter. |
CVE-2021-39184 | Medium | 6.8 | 2021-10-12 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, an… |
CVE-2021-38915 | Medium | 6.5 | 2021-10-12 | IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947. |
CVE-2021-38862 | High | 7.5 | 2021-10-12 | IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM… |
CVE-2021-29645 | High | 7.0 | 2021-10-12 | Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privileg… |
CVE-2021-29644 | High | 8.1 | 2021-10-12 | Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network… |
CVE-2021-40618 | Critical | 9.8 | 2021-10-12 | An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2) ADDR_CONT_PSWD, 3) SECN_CONT_USRN or 4) SECN_CONT_PSWD parameters in… |
CVE-2021-40292 | Medium | 5.4 | 2021-10-12 | A Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter. |
CVE-2021-3671 | Medium | 6.5 | 2021-10-12 | A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated us… |
CVE-2021-35496 | High | 7.5 | 2021-10-12 | The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports… |
CVE-2021-35495 | Critical | 9.0 | 2021-10-12 | The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperRep… |
CVE-2021-35494 | Medium | 5.7 | 2021-10-12 | The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server… |
CVE-2021-27003 | Medium | 4.7 | 2021-10-12 | Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack. |
CVE-2021-41136 | Low | 3.7 | 2021-10-12 | Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using `puma` with a proxy which forwards HTTP header values which cont… |
CVE-2021-37735 | Medium | 5.3 | 2021-10-12 | A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.10… |
CVE-2021-37734 | Medium | 6.5 | 2021-10-12 | A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x… |
CVE-2021-37732 | High | 7.2 | 2021-10-12 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aru… |
CVE-2021-35214 | Medium | 4.8 | 2021-10-12 | The vulnerability in SolarWinds Pingdom can be described as a failure to invalidate user session upon password or email address change. When running multiple a… |
CVE-2021-40500 | High | 7.5 | 2021-10-12 | SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations… |
CVE-2021-40499 | Critical | 9.8 | 2021-10-12 | Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an… |
CVE-2021-40498 | Medium | 5.5 | 2021-10-12 | A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, which allows an attacker to prevent legiti… |
CVE-2021-40497 | Medium | 5.3 | 2021-10-12 | SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These… |