2021 CVEs (page 111)
Page 111 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41118 | Medium | 5.3 | 2021-10-04 | The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected vers… |
CVE-2021-41100 | High | 7.4 | 2021-10-04 | Wire-server is the backing server for the open source wire secure messaging application. In affected versions it is possible to trigger email address change of… |
CVE-2021-41094 | Medium | 4.2 | 2021-10-04 | Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. U… |
CVE-2021-41093 | High | 7.4 | 2021-10-04 | Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing t… |
CVE-2021-41579 | High | 7.8 | 2021-10-04 | LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicious els project file… |
CVE-2021-41578 | High | 7.8 | 2021-10-04 | mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicio… |
CVE-2021-41099 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and… |
CVE-2021-39347 | Medium | 4.3 | 2021-10-04 | The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit… |
CVE-2021-38618 | High | 7.4 | 2021-10-04 | In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except… |
CVE-2021-38400 | Medium | 6.9 | 2021-10-04 | An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create a specially crafted USB to extract the… |
CVE-2021-38398 | Medium | 6.5 | 2021-10-04 | The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected de… |
CVE-2021-38396 | Medium | 6.5 | 2021-10-04 | The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could lev… |
CVE-2021-38394 | Medium | 6.2 | 2021-10-04 | An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a… |
CVE-2021-38392 | Medium | 6.5 | 2021-10-04 | A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to change the telemetry region and could us… |
CVE-2021-32762 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer over… |
CVE-2021-32687 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap… |
CVE-2021-32675 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory acco… |
CVE-2021-32672 | Medium | 5.3 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger… |
CVE-2021-32628 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be e… |
CVE-2021-32627 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap a… |
CVE-2021-32626 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-bas… |
CVE-2021-23858 | High | 8.6 | 2021-10-04 | Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accesse… |
CVE-2021-23857 | Critical | 10.0 | 2021-10-04 | Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CV… |
CVE-2021-23856 | Critical | 10.0 | 2021-10-04 | The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipul… |
CVE-2021-23855 | High | 8.6 | 2021-10-04 | The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an att… |
CVE-2021-41596 | Medium | 5.3 | 2021-10-04 | SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile… |
CVE-2021-41595 | Medium | 5.3 | 2021-10-04 | SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name… |
CVE-2021-41593 | High | 8.6 | 2021-10-04 | Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure. |
CVE-2021-41592 | Critical | 9.4 | 2021-10-04 | Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure. |
CVE-2021-41591 | Critical | 9.4 | 2021-10-04 | ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure. |
CVE-2021-41530 | High | 7.5 | 2021-10-04 | Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Res… |
CVE-2021-41103 | High | 7.8 | 2021-10-04 | containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root d… |
CVE-2021-40683 | High | 7.8 | 2021-10-04 | In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack… |
CVE-2021-39900 | Low | 2.0 | 2021-10-04 | Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availabi… |
CVE-2021-39899 | Low | 2.9 | 2021-10-04 | In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. The… |
CVE-2021-39896 | Low | 3.8 | 2021-10-04 | In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the… |
CVE-2021-39885 | High | 8.7 | 2021-10-04 | A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions starting from 14.2 before 14.2.5, and a… |
CVE-2021-39883 | Medium | 4.3 | 2021-10-04 | Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions s… |
CVE-2021-39879 | Low | 2.2 | 2021-10-04 | Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authenti… |
CVE-2021-39877 | High | 7.7 | 2021-10-04 | A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted… |
CVE-2021-39874 | Medium | 4.3 | 2021-10-04 | In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git commands. |
CVE-2021-39873 | Medium | 4.3 | 2021-10-04 | In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visiting a malicious web… |
CVE-2021-39871 | Medium | 4.3 | 2021-10-04 | In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker maki… |
CVE-2021-39868 | Medium | 4.3 | 2021-10-04 | In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited repository size by modif… |
CVE-2021-36850 | Medium | 5.4 | 2021-10-04 | Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions <= 5.1.9). Affected parameters "post_ti… |
CVE-2021-35296 | Critical | 9.8 | 2021-10-04 | An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Res… |
CVE-2021-22259 | Medium | 4.3 | 2021-10-04 | A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API. |
CVE-2021-25964 | Medium | 5.4 | 2021-10-04 | In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can… |
CVE-2021-41868 | Critical | 9.8 | 2021-10-04 | OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality. |
CVE-2021-41867 | Medium | 5.3 | 2021-10-04 | An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non… |
CVE-2021-39486 | Medium | 5.4 | 2021-10-04 | A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a vic… |
CVE-2021-38823 | Critical | 9.8 | 2021-10-04 | The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session that is ope… |
CVE-2021-38822 | Medium | 5.4 | 2021-10-04 | A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaS… |
CVE-2021-37777 | High | 7.5 | 2021-10-04 | Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowin… |
CVE-2021-37333 | Critical | 9.8 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not… |
CVE-2021-37331 | Medium | 5.3 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and v… |
CVE-2021-37330 | Medium | 5.4 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be exploited to upload a… |
CVE-2021-36051 | High | 7.8 | 2021-10-04 | XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of… |
CVE-2021-41511 | Critical | 9.8 | 2021-10-04 | The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authenticatio… |
CVE-2021-41878 | Medium | 6.1 | 2021-10-04 | A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrar… |
CVE-2021-24687 | Medium | 4.8 | 2021-10-04 | The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privile… |
CVE-2021-24679 | Medium | 6.1 | 2021-10-04 | The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Mas… |
CVE-2021-24678 | Medium | 5.4 | 2021-10-04 | The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Con… |
CVE-2021-24676 | Medium | 6.1 | 2021-10-04 | The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading t… |
CVE-2021-24673 | Medium | 4.8 | 2021-10-04 | The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored… |
CVE-2021-24654 | Medium | 5.4 | 2021-10-04 | The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user… |
CVE-2021-24465 | High | 8.1 | 2021-10-04 | The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as… |
CVE-2021-22557 | Medium | 5.3 | 2021-10-04 | SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We re… |
CVE-2021-41869 | High | 8.8 | 2021-10-04 | SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation. |
CVE-2021-41322 | High | 8.8 | 2021-10-04 | Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process. |
CVE-2021-41285 | High | 7.8 | 2021-10-04 | Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a spe… |
CVE-2021-40325 | High | 7.5 | 2021-10-04 | Cobbler before 3.3.0 allows authorization bypass for modification of settings. |
CVE-2021-40324 | High | 7.5 | 2021-10-04 | Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. |
CVE-2021-40323 | Critical | 9.8 | 2021-10-04 | Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection. |
CVE-2021-21706 | Medium | 5.3 | 2021-10-04 | In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writ… |
CVE-2021-21705 | Medium | 4.3 | 2021-10-04 | In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VAL… |
CVE-2021-21704 | Medium | 5.0 | 2021-10-04 | In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause… |
CVE-2021-41861 | Low | 3.3 | 2021-10-04 | The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than CVE-2019-16248. Aft… |
CVE-2021-41864 | High | 7.8 | 2021-10-02 | prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer ove… |
CVE-2021-41862 | Critical | 9.8 | 2021-10-02 | AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL). |
CVE-2021-38109 | Medium | 5.5 | 2021-10-02 | Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage t… |
CVE-2021-38108 | Medium | 5.5 | 2021-10-02 | Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated att… |
CVE-2021-38107 | Medium | 5.5 | 2021-10-02 | CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-41847 | High | 8.8 | 2021-10-01 | An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with login credentials assigned to a specifi… |
CVE-2021-38110 | High | 7.8 | 2021-10-01 | Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated at… |
CVE-2021-38106 | Medium | 5.5 | 2021-10-01 | UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38105 | Medium | 5.5 | 2021-10-01 | IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38102 | Medium | 5.5 | 2021-10-01 | IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38101 | High | 7.8 | 2021-10-01 | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated att… |
CVE-2021-38100 | High | 7.8 | 2021-10-01 | Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could le… |
CVE-2021-38098 | High | 7.8 | 2021-10-01 | Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerabil… |
CVE-2021-36309 | High | 7.1 | 2021-10-01 | Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to… |
CVE-2021-36298 | High | 8.1 | 2021-10-01 | Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially e… |
CVE-2021-41845 | Medium | 6.5 | 2021-10-01 | A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 through 11.0.000006. |
CVE-2021-38104 | Medium | 5.5 | 2021-10-01 | IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38103 | High | 7.8 | 2021-10-01 | IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker… |
CVE-2021-38099 | High | 7.8 | 2021-10-01 | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated att… |
CVE-2021-38096 | High | 7.8 | 2021-10-01 | Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could lever… |
CVE-2021-38097 | High | 7.8 | 2021-10-01 | Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulne… |
CVE-2021-41467 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web s… |