2021 CVEs (page 127)
Page 127 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34149 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing… |
CVE-2021-34148 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot… |
CVE-2021-34147 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timin… |
CVE-2021-34146 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing at… |
CVE-2021-34145 | Medium | 5.3 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot… |
CVE-2021-34143 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C_DEMO_V1.0 does not properly handle the reception of continuous unsolicited LMP responses, allo… |
CVE-2021-31786 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAdd… |
CVE-2021-31785 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets… |
CVE-2021-31612 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes dur… |
CVE-2021-31611 | Medium | 5.7 | 2021-09-07 | The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by… |
CVE-2021-31610 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in r… |
CVE-2021-31609 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17… |
CVE-2021-28139 | High | 8.8 | 2021-09-07 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response… |
CVE-2021-39279 | High | 8.8 | 2021-09-07 | Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LT… |
CVE-2021-39278 | Medium | 6.1 | 2021-09-07 | Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell… |
CVE-2021-38841 | High | 8.8 | 2021-09-07 | Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the system_info page in classes/SystemSet… |
CVE-2021-38840 | Critical | 9.8 | 2021-09-07 | SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the water_refilling/classes/Login.php username parameter. |
CVE-2021-34150 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of oversized DM1 LMP pac… |
CVE-2021-34144 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMP_SCO_Link_Request… |
CVE-2021-33831 | Medium | 6.5 | 2021-09-07 | api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. An attacker can interfere with trac… |
CVE-2021-31613 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of a truncated LMP packet during the LMP… |
CVE-2021-28155 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attacker… |
CVE-2021-28136 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets… |
CVE-2021-28135 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allow… |
CVE-2021-33484 | High | 7.5 | 2021-09-07 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the installer, decompile it, and discover a h… |
CVE-2021-33483 | Medium | 5.4 | 2021-09-07 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows an attacker to add an XSS payload to th… |
CVE-2021-40540 | Critical | 9.8 | 2021-09-07 | ulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omits con_info initialization and a con_info->request NULL check for certain malformed HTTP requests. |
CVE-2021-40532 | Critical | 9.8 | 2021-09-06 | Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension. |
CVE-2021-40531 | Critical | 9.8 | 2021-09-06 | Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine ext… |
CVE-2021-40530 | Medium | 5.9 | 2021-09-06 | The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangero… |
CVE-2021-40529 | Medium | 5.9 | 2021-09-06 | The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between tw… |
CVE-2021-40528 | Medium | 5.9 | 2021-09-06 | The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dange… |
CVE-2021-24006 | Medium | 6.3 | 2021-09-06 | An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user profile to access t… |
CVE-2021-36096 | Medium | 5.2 | 2021-09-06 | Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x… |
CVE-2021-36095 | Medium | 5.3 | 2021-09-06 | Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6… |
CVE-2021-36094 | Medium | 5.7 | 2021-09-06 | It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x… |
CVE-2021-36093 | Medium | 5.3 | 2021-09-06 | It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG ((OTRS)) Community Ed… |
CVE-2021-3770 | High | 7.8 | 2021-09-06 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3768 | Medium | 5.4 | 2021-09-06 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-3767 | Medium | 5.4 | 2021-09-06 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-3766 | Critical | 9.8 | 2021-09-06 | objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2021-36744 | High | 7.8 | 2021-09-06 | Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escal… |
CVE-2021-32568 | High | 7.8 | 2021-09-06 | mrdoc is vulnerable to Deserialization of Untrusted Data |
CVE-2021-25737 | Low | 2.7 | 2021-09-06 | A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creat… |
CVE-2021-25735 | Medium | 6.5 | 2021-09-06 | A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vu… |
CVE-2021-24611 | Medium | 5.4 | 2021-09-06 | The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing f… |
CVE-2021-24603 | Medium | 5.4 | 2021-09-06 | The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perfor… |
CVE-2021-24601 | Medium | 5.4 | 2021-09-06 | The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, which could allow high privilege users to… |
CVE-2021-24599 | Medium | 6.1 | 2021-09-06 | The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value… |
CVE-2021-24591 | Medium | 5.4 | 2021-09-06 | The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to perform Cross-Site Scripting attacks even… |
CVE-2021-24590 | Medium | 5.4 | 2021-09-06 | The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary… |
CVE-2021-24588 | Medium | 6.1 | 2021-09-06 | The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerability in the plugin's setting page. |
CVE-2021-24568 | Medium | 5.4 | 2021-09-06 | The AddToAny Share Buttons WordPress plugin before 1.7.46 does not sanitise its Sharing Header setting when outputting it in frontend pages, allowing high priv… |
CVE-2021-24517 | Medium | 5.4 | 2021-09-06 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege us… |
CVE-2021-24513 | Medium | 5.4 | 2021-09-06 | The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users su… |
CVE-2021-24435 | Medium | 6.1 | 2021-09-06 | The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in… |
CVE-2021-24395 | High | 7.2 | 2021-09-06 | The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, le… |
CVE-2021-24394 | High | 7.2 | 2021-09-06 | An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validated before inserting to a SQL statement… |
CVE-2021-24393 | High | 7.2 | 2021-09-06 | A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement… |
CVE-2021-24392 | High | 7.2 | 2021-09-06 | An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to… |
CVE-2021-24391 | High | 8.8 | 2021-09-06 | An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, le… |
CVE-2021-24390 | High | 7.2 | 2021-09-06 | A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before in… |
CVE-2021-24303 | High | 8.8 | 2021-09-06 | The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, le… |
CVE-2021-40524 | High | 7.5 | 2021-09-05 | In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denia… |
CVE-2021-40523 | High | 7.5 | 2021-09-05 | In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fail to give the WILL/WONT or DO/DONT… |
CVE-2021-40516 | High | 7.5 | 2021-09-05 | WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/r… |
CVE-2021-23439 | Medium | 4.2 | 2021-09-05 | This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tri… |
CVE-2021-40509 | Medium | 5.4 | 2021-09-04 | ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature. |
CVE-2021-30624 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30624 Use after free in Autofill |
CVE-2021-30623 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30623 Use after free in Bookmarks |
CVE-2021-30622 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30622 Use after free in WebApp Installs |
CVE-2021-30621 | Medium | 6.5 | 2021-09-03 | Chromium: CVE-2021-30621 UI Spoofing in Autofill |
CVE-2021-30620 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
CVE-2021-30619 | Medium | 6.5 | 2021-09-03 | Chromium: CVE-2021-30619 UI Spoofing in Autofill |
CVE-2021-30618 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
CVE-2021-30617 | Medium | 6.5 | 2021-09-03 | Chromium: CVE-2021-30617 Policy bypass in Blink |
CVE-2021-30616 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30616 Use after free in Media |
CVE-2021-30615 | Medium | 6.5 | 2021-09-03 | Chromium: CVE-2021-30615 Cross-origin data leak in Navigation |
CVE-2021-30614 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
CVE-2021-30613 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30613 Use after free in Base internals |
CVE-2021-30612 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30612 Use after free in WebRTC |
CVE-2021-30611 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30611 Use after free in WebRTC |
CVE-2021-30610 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30610 Use after free in Extensions API |
CVE-2021-30609 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30609 Use after free in Sign-In |
CVE-2021-30608 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30608 Use after free in Web Share |
CVE-2021-30607 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30607 Use after free in Permissions |
CVE-2021-30606 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30606 Use after free in Blink |
CVE-2021-39193 | Medium | 5.3 | 2021-09-03 | Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in `pallet-ethereum` can cause inv… |
CVE-2021-40492 | Medium | 6.1 | 2021-09-03 | A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseC… |
CVE-2021-23437 | High | 7.5 | 2021-09-03 | The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. |
CVE-2021-39192 | Medium | 6.5 | 2021-09-03 | Ghost is a Node.js content management system. An error in the implementation of the limits service between versions 4.0.0 and 4.9.4 allows all authenticated us… |
CVE-2021-39191 | Medium | 4.7 | 2021-09-03 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating use… |
CVE-2021-40494 | Critical | 9.8 | 2021-09-03 | A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system. |
CVE-2021-40491 | Medium | 6.5 | 2021-09-03 | The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is simi… |
CVE-2021-40490 | High | 7.0 | 2021-09-03 | A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. |
CVE-2021-38642 | Medium | 6.1 | 2021-09-02 | Microsoft Edge for iOS Spoofing Vulnerability |
CVE-2021-38641 | Medium | 6.1 | 2021-09-02 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2021-36930 | Medium | 5.3 | 2021-09-02 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2021-26439 | Medium | 4.6 | 2021-09-02 | Microsoft Edge for Android Information Disclosure Vulnerability |
CVE-2021-26436 | Medium | 6.1 | 2021-09-02 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |