2021 CVEs (page 138)
Page 138 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22938 | High | 7.2 | 2021-08-16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter… |
CVE-2021-22937 | High | 7.2 | 2021-08-16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uplo… |
CVE-2021-22936 | Medium | 6.1 | 2021-08-16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator v… |
CVE-2021-22935 | High | 7.2 | 2021-08-16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter. |
CVE-2021-22934 | High | 7.2 | 2021-08-16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced… |
CVE-2021-22933 | Medium | 6.5 | 2021-08-16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a maliciously crafted… |
CVE-2021-22932 | High | 7.5 | 2021-08-16 | An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option t… |
CVE-2021-22931 | Critical | 9.8 | 2021-08-16 | Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names retu… |
CVE-2021-0114 | Medium | 6.7 | 2021-08-16 | Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local acce… |
CVE-2021-38758 | High | 7.5 | 2021-08-16 | Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php. |
CVE-2021-38757 | Medium | 6.1 | 2021-08-16 | Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php. |
CVE-2021-38756 | Medium | 6.1 | 2021-08-16 | Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php. |
CVE-2021-38755 | Medium | 5.3 | 2021-08-16 | Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php. |
CVE-2021-38754 | Critical | 9.8 | 2021-08-16 | SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php. |
CVE-2021-38753 | Critical | 9.8 | 2021-08-16 | An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain unauthorized access to the server hosti… |
CVE-2021-38752 | Medium | 5.4 | 2021-08-16 | A cross-site scripting (XSS) vulnerability in Online Catering Reservation System using PHP on Sourcecodester allows an attacker to arbitrarily inject code in t… |
CVE-2021-38751 | Medium | 4.3 | 2021-08-16 | A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A modified HTTP header can change links on the webpage to an arbitrar… |
CVE-2021-38607 | Medium | 5.4 | 2021-08-16 | Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input. |
CVE-2021-35395 | Critical | 9.8 | 2021-08-16 | Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two… |
CVE-2021-35394 | Critical | 9.8 | 2021-08-16 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affe… |
CVE-2021-35393 | Critical | 9.8 | 2021-08-16 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named… |
CVE-2021-35392 | High | 7.5 | 2021-08-16 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named… |
CVE-2021-24548 | Medium | 5.4 | 2021-08-16 | The Mimetic Books WordPress plugin through 0.2.13 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS) in the "Default Publisher ID" field on the… |
CVE-2021-24541 | Medium | 5.4 | 2021-08-16 | The Wonder PDF Embed WordPress plugin before 1.7 does not escape parameters of its wonderplugin_pdf shortcode, which could allow users with a role as low as Co… |
CVE-2021-24540 | Medium | 5.4 | 2021-08-16 | The Wonder Video Embed WordPress plugin before 1.8 does not escape parameters of its wonderplugin_video shortcode, which could allow users with a role as low a… |
CVE-2021-24538 | Medium | 5.4 | 2021-08-16 | The Current Book WordPress plugin through 1.0.1 does not sanitize user input when an authenticated user adds Author or Book Title, then does not escape these v… |
CVE-2021-24536 | Medium | 6.1 | 2021-08-16 | The Custom Login Redirect WordPress plugin through 1.0.0 does not have CSRF check in place when saving its settings, and do not sanitise or escape user input b… |
CVE-2021-24535 | Medium | 6.1 | 2021-08-16 | The Light Messages WordPress plugin through 1.0 is lacking CSRF check when updating it's settings, and is not sanitising its Message Content in them (even with… |
CVE-2021-24534 | Medium | 5.4 | 2021-08-16 | The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "php_id" setting before outputting it back in an attribute in the… |
CVE-2021-24527 | Critical | 9.8 | 2021-08-16 | The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog… |
CVE-2021-24526 | Medium | 5.4 | 2021-08-16 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin before 1.13.60 does not escape its Form Title before outputting it… |
CVE-2021-24519 | Medium | 4.8 | 2021-08-16 | The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' field when adding or editing a Characteris… |
CVE-2021-24518 | Medium | 4.8 | 2021-08-16 | The WPFront Notification Bar WordPress plugin before 2.0.0.07176 does not sanitise or escape its Custom CSS setting, allowing high privilege users such as admi… |
CVE-2021-24512 | Medium | 5.4 | 2021-08-16 | The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrat… |
CVE-2021-24471 | Medium | 5.4 | 2021-08-16 | The YouTube Embed WordPress plugin before 5.2.2 does not validate, escape or sanitise some of its shortcode attributes, leading to Stored XSS issues by 1. usin… |
CVE-2021-24466 | Medium | 6.1 | 2021-08-16 | The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted action… |
CVE-2021-24445 | Medium | 5.5 | 2021-08-16 | The My Site Audit WordPress plugin through 1.2.4 does not sanitise or escape the Audit Name field when creating an audit, allowing high privilege users to set… |
CVE-2021-24411 | Medium | 6.1 | 2021-08-16 | The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting… |
CVE-2021-24410 | Medium | 6.1 | 2021-08-16 | The తెలుగు బైబిల్ వచనములు WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when o… |
CVE-2021-24380 | Medium | 4.3 | 2021-08-16 | The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrat… |
CVE-2021-24363 | Medium | 4.9 | 2021-08-16 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder… |
CVE-2021-24362 | Medium | 6.1 | 2021-08-16 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded SVG files added to a gallery do not cont… |
CVE-2021-35936 | Medium | 5.3 | 2021-08-16 | If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is li… |
CVE-2021-33193 | High | 7.5 | 2021-08-16 | A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue a… |
CVE-2021-23423 | Medium | 5.5 | 2021-08-16 | This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed… |
CVE-2021-23422 | High | 7.8 | 2021-08-16 | This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbit… |
CVE-2021-3708 | High | 7.8 | 2021-08-16 | D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exp… |
CVE-2021-3707 | Medium | 5.5 | 2021-08-16 | D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the lo… |
CVE-2021-38713 | Medium | 5.4 | 2021-08-16 | imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header. |
CVE-2021-38712 | High | 7.5 | 2021-08-16 | OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via an NGINX configurati… |
CVE-2021-38711 | High | 7.5 | 2021-08-16 | In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files. |
CVE-2021-38709 | Medium | 6.1 | 2021-08-16 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS. |
CVE-2021-38708 | Medium | 5.4 | 2021-08-16 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS. |
CVE-2021-26086 | Medium | 5.3 | 2021-08-16 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/w… |
CVE-2021-25955 | Critical | 9.0 | 2021-08-15 | In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to stor… |
CVE-2021-38699 | Medium | 5.4 | 2021-08-15 | TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs. |
CVE-2021-37326 | Medium | 5.3 | 2021-08-15 | NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations. |
CVE-2021-21815 | High | 7.8 | 2021-08-13 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleF… |
CVE-2021-21814 | High | 7.8 | 2021-08-13 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly… |
CVE-2021-21813 | High | 7.8 | 2021-08-13 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly… |
CVE-2021-21812 | High | 7.8 | 2021-08-13 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7. Within the function HandleF… |
CVE-2021-37705 | Critical | 10.0 | 2021-08-13 | OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authe… |
CVE-2021-21830 | Critical | 9.8 | 2021-08-13 | A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file… |
CVE-2021-21829 | Critical | 9.8 | 2021-08-13 | A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A spe… |
CVE-2021-38623 | High | 7.5 | 2021-08-13 | The deferred_image_processing (aka Deferred image processing) extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transie… |
CVE-2021-38302 | Critical | 9.8 | 2021-08-13 | The Newsletter extension through 4.0.0 for TYPO3 allows SQL Injection. |
CVE-2021-36793 | High | 7.5 | 2021-08-13 | The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitive Information Disclosure because a sess… |
CVE-2021-36792 | High | 7.2 | 2021-08-13 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications. |
CVE-2021-36791 | Medium | 5.3 | 2021-08-13 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data. |
CVE-2021-36790 | Medium | 6.1 | 2021-08-13 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS. |
CVE-2021-36789 | Critical | 9.8 | 2021-08-13 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection. |
CVE-2021-36788 | Medium | 5.4 | 2021-08-13 | The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS. |
CVE-2021-36787 | Medium | 5.4 | 2021-08-13 | The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document. |
CVE-2021-36786 | High | 7.5 | 2021-08-13 | The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys. |
CVE-2021-36785 | Medium | 5.4 | 2021-08-13 | The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS. |
CVE-2021-34823 | Critical | 9.1 | 2021-08-13 | The ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticat… |
CVE-2021-3352 | Critical | 9.1 | 2021-08-13 | The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacke… |
CVE-2021-38554 | Medium | 5.3 | 2021-08-13 | HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pe… |
CVE-2021-38553 | Medium | 4.4 | 2021-08-13 | HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessivel… |
CVE-2021-37703 | Medium | 4.3 | 2021-08-13 | Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the… |
CVE-2021-37693 | Medium | 5.3 | 2021-08-13 | Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an… |
CVE-2021-37586 | Medium | 4.9 | 2021-08-13 | The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Administrator rights) to replay a previousl… |
CVE-2021-37028 | Medium | 6.7 | 2021-08-13 | There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is disabled by default, attackers with adm… |
CVE-2021-36380 | Critical | 9.8 | 2021-08-13 | Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi. |
CVE-2021-34398 | High | 7.8 | 2021-08-13 | NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is… |
CVE-2021-32072 | Medium | 6.5 | 2021-08-13 | The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code information (disclosing sensitive application dat… |
CVE-2021-32071 | Critical | 9.8 | 2021-08-13 | The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due to improper access control. A successful… |
CVE-2021-32070 | Medium | 5.4 | 2021-08-13 | The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking attack due to an insecure header response… |
CVE-2021-32069 | Medium | 4.8 | 2021-08-13 | The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful expl… |
CVE-2021-32068 | Low | 3.7 | 2021-08-13 | The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple s… |
CVE-2021-32067 | Medium | 6.5 | 2021-08-13 | The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP response due to… |
CVE-2021-29880 | Medium | 6.5 | 2021-08-13 | IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenants by routing SIEM d… |
CVE-2021-27402 | Medium | 6.5 | 2021-08-13 | The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary dire… |
CVE-2021-27401 | Medium | 6.1 | 2021-08-13 | The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrary code due… |
CVE-2021-1104 | Critical | 9.8 | 2021-08-13 | The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability du… |
CVE-2021-38621 | Critical | 9.1 | 2021-08-13 | The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-30 mishandles file ownership. |
CVE-2021-38619 | Medium | 6.1 | 2021-08-13 | openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduct a stored cross-site scripting (XSS) a… |
CVE-2021-3635 | Medium | 4.4 | 2021-08-13 | A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system… |
CVE-2021-3573 | Medium | 6.4 | 2021-08-13 | A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers… |
CVE-2021-38583 | Medium | 6.1 | 2021-08-13 | openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting (XSS) on multiple pages: hr/subscription… |