2021 CVEs (page 118)
Page 118 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24640 | Medium | 5.4 | 2021-09-20 | The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as… |
CVE-2021-24639 | High | 8.1 | 2021-09-20 | The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any… |
CVE-2021-24638 | Critical | 9.1 | 2021-09-20 | The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path tra… |
CVE-2021-24637 | Medium | 5.4 | 2021-09-20 | The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contri… |
CVE-2021-24636 | High | 8.1 | 2021-09-20 | The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Pr… |
CVE-2021-24635 | Medium | 5.4 | 2021-09-20 | The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authentic… |
CVE-2021-24618 | Medium | 5.4 | 2021-09-20 | The Donate With QRCode WordPress plugin before 1.4.5 does not sanitise or escape its QRCode Image setting, which result into a Stored Cross-Site Scripting (XSS… |
CVE-2021-24613 | Medium | 4.8 | 2021-09-20 | The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perfo… |
CVE-2021-24609 | Medium | 4.8 | 2021-09-20 | The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before outputting them in attributes, allowing high… |
CVE-2021-24606 | High | 8.8 | 2021-09-20 | The Availability Calendar WordPress plugin before 1.2.1 does not escape the category attribute from its shortcode before using it in a SQL statement, leading t… |
CVE-2021-24604 | Medium | 4.8 | 2021-09-20 | The Availability Calendar WordPress plugin before 1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated… |
CVE-2021-24600 | Medium | 4.8 | 2021-09-20 | The WP Dialog WordPress plugin through 1.2.5.5 does not sanitise and escape some of its settings before outputting them in pages, allowing high privilege users… |
CVE-2021-24597 | Medium | 5.4 | 2021-09-20 | The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts… |
CVE-2021-24596 | Medium | 4.8 | 2021-09-20 | The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users (editors and adm… |
CVE-2021-24587 | Medium | 5.4 | 2021-09-20 | The Splash Header WordPress plugin before 1.20.8 doesn't sanitise and escape some of its settings while outputting them in the admin dashboard, leading to an a… |
CVE-2021-24585 | Medium | 6.5 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the… |
CVE-2021-24584 | Medium | 5.4 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_po… |
CVE-2021-24583 | Medium | 4.3 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the edit_po… |
CVE-2021-24582 | Medium | 5.4 | 2021-09-20 | The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored C… |
CVE-2021-24530 | Medium | 4.8 | 2021-09-20 | The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high privilege users to perform Cross-Site Scri… |
CVE-2021-24525 | Medium | 5.4 | 2021-09-20 | The Shortcodes Ultimate WordPress plugin before 5.10.2 allows users with Contributor roles to perform stored XSS via shortcode attributes. Note: the plugin is… |
CVE-2021-24511 | High | 7.2 | 2021-09-20 | The fetch_product_ajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a `product_id` POST parameter which is not properl… |
CVE-2021-24404 | High | 8.8 | 2021-09-20 | The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting… |
CVE-2021-24403 | High | 7.2 | 2021-09-20 | The Orders functionality in the WordPress Page Contact plugin through 1.0 has an order_id parameter which is not sanitised, escaped or validated before inserti… |
CVE-2021-24402 | High | 7.2 | 2021-09-20 | The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an `order_id` parameter which is not sanitised, escaped or validated before ins… |
CVE-2021-24401 | High | 7.2 | 2021-09-20 | The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an `editid` parameter which is not sanitised, escaped or validated bef… |
CVE-2021-24400 | High | 7.2 | 2021-09-20 | The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inser… |
CVE-2021-24399 | High | 7.2 | 2021-09-20 | The check_order function of The Sorter WordPress plugin through 1.0 uses an `area_id` parameter which is not sanitised, escaped or validated before inserting t… |
CVE-2021-24398 | High | 7.2 | 2021-09-20 | The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated befo… |
CVE-2021-24397 | High | 7.2 | 2021-09-20 | The edit functionality in the MicroCopy WordPress plugin through 1.1.0 makes a get request to fetch the related option. The id parameter used is not sanitised… |
CVE-2021-24396 | High | 7.2 | 2021-09-20 | A pageid GET parameter of the GSEOR – WordPress SEO Plugin WordPress plugin through 1.3 is not sanitised, escaped or validated before inserting to a SQL statem… |
CVE-2021-38300 | High | 7.8 | 2021-09-20 | arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing executio… |
CVE-2021-40690 | High | 7.5 | 2021-09-19 | All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passe… |
CVE-2021-41073 | High | 7.8 | 2021-09-19 | loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a fre… |
CVE-2021-41395 | Medium | 6.5 | 2021-09-18 | Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or userna… |
CVE-2021-41394 | Medium | 5.3 | 2021-09-18 | Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations. |
CVE-2021-41393 | Critical | 9.8 | 2021-09-18 | Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations. |
CVE-2021-3806 | Medium | 5.3 | 2021-09-18 | A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write… |
CVE-2021-41392 | Critical | 9.8 | 2021-09-17 | static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable… |
CVE-2021-41391 | Medium | 5.4 | 2021-09-17 | In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leadi… |
CVE-2021-41390 | High | 8.0 | 2021-09-17 | In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection. |
CVE-2021-41387 | High | 8.8 | 2021-09-17 | seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root. |
CVE-2021-39218 | Medium | 6.3 | 2021-09-17 | Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulner… |
CVE-2021-41383 | High | 7.2 | 2021-09-17 | setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field. |
CVE-2021-41380 | Medium | 6.5 | 2021-09-17 | RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data. NOTE: It is asserted that thi… |
CVE-2021-39219 | Medium | 6.3 | 2021-09-17 | Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusion vulnerability. As a Rust library the… |
CVE-2021-39216 | Medium | 6.3 | 2021-09-17 | Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 there was a use-after-free bug when passin… |
CVE-2021-38412 | Critical | 9.6 | 2021-09-17 | Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication… |
CVE-2021-38406 | High | 7.8 | 2021-09-17 | Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in… |
CVE-2021-38404 | High | 7.8 | 2021-09-17 | Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in… |
CVE-2021-38402 | High | 7.8 | 2021-09-17 | Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could lead to a… |
CVE-2021-41326 | Critical | 9.8 | 2021-09-17 | In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call. |
CVE-2021-40825 | High | 8.6 | 2021-09-17 | nLight ECLYPSE (nECY) system Controllers running software prior to 1.17.21245.754 contain a default key vulnerability. The nECY does not force a change to the… |
CVE-2021-41317 | Critical | 9.8 | 2021-09-17 | XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths. |
CVE-2021-38304 | High | 7.8 | 2021-09-17 | Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation o… |
CVE-2021-41316 | High | 8.1 | 2021-09-17 | The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run b… |
CVE-2021-41315 | High | 8.8 | 2021-09-17 | The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (with access… |
CVE-2021-39228 | Medium | 6.5 | 2021-09-17 | Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Iss… |
CVE-2021-39227 | Medium | 6.2 | 2021-09-17 | ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using `merge` and `clone` helper methods in the `src… |
CVE-2021-31845 | High | 8.4 | 2021-09-17 | A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to e… |
CVE-2021-31844 | High | 8.2 | 2021-09-17 | A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code w… |
CVE-2021-31843 | High | 7.3 | 2021-09-17 | Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files… |
CVE-2021-31842 | Medium | 5.0 | 2021-09-17 | XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiat… |
CVE-2021-39327 | Medium | 5.3 | 2021-09-17 | The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backu… |
CVE-2021-23442 | High | 8.6 | 2021-09-17 | This affects all versions of package @cookiex/deep. The global proto object can be polluted using the __proto__ object. |
CVE-2021-41303 | Critical | 9.8 | 2021-09-17 | Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update t… |
CVE-2021-3812 | Medium | 6.1 | 2021-09-17 | adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-3811 | Medium | 6.1 | 2021-09-17 | adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-3810 | High | 7.5 | 2021-09-17 | code-server is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3807 | High | 7.5 | 2021-09-17 | ansi-regex is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3804 | High | 7.5 | 2021-09-17 | taro is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3803 | High | 7.5 | 2021-09-17 | nth-check is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-30261 | High | 8.4 | 2021-09-17 | Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Sna… |
CVE-2021-30260 | High | 8.4 | 2021-09-17 | Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is rece… |
CVE-2021-1976 | Critical | 9.8 | 2021-09-17 | A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1947 | High | 8.4 | 2021-09-17 | Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industr… |
CVE-2021-1939 | High | 8.4 | 2021-09-17 | Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-3805 | High | 7.5 | 2021-09-17 | object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2021-20828 | Medium | 6.1 | 2021-09-17 | Cross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) all versions allows a remote attacker to inject an arbitrary s… |
CVE-2021-20825 | Medium | 6.1 | 2021-09-17 | Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inje… |
CVE-2021-20791 | Critical | 9.3 | 2021-09-17 | Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized fil… |
CVE-2021-20790 | Critical | 9.6 | 2021-09-17 | Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via uns… |
CVE-2021-41314 | High | 8.8 | 2021-09-16 | Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication schem… |
CVE-2021-40670 | Critical | 9.8 | 2021-09-16 | SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file. |
CVE-2021-40669 | Critical | 9.8 | 2021-09-16 | SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file. |
CVE-2021-29842 | Medium | 5.3 | 2021-09-16 | IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference… |
CVE-2021-29825 | High | 7.5 | 2021-09-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID… |
CVE-2021-29763 | Medium | 5.1 | 2021-09-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a proc… |
CVE-2021-29752 | Medium | 4.4 | 2021-09-16 | IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM… |
CVE-2021-41079 | High | 7.5 | 2021-09-16 | Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO… |
CVE-2021-40438 | Critical | 9.0 | 2021-09-16 | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4… |
CVE-2021-39275 | Critical | 9.8 | 2021-09-16 | ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party… |
CVE-2021-39239 | High | 7.5 | 2021-09-16 | A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the… |
CVE-2021-39214 | High | 8.1 | 2021-09-16 | mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smu… |
CVE-2021-39208 | Medium | 4.3 | 2021-09-16 | SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal… |
CVE-2021-36160 | High | 7.5 | 2021-09-16 | A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versio… |
CVE-2021-34798 | High | 7.5 | 2021-09-16 | Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. |
CVE-2021-27341 | Critical | 9.8 | 2021-09-16 | OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter. |
CVE-2021-27340 | Medium | 6.1 | 2021-09-16 | OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter. |
CVE-2021-34576 | Medium | 4.3 | 2021-09-16 | In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumpti… |