2021 CVEs (page 140)
Page 140 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-36937 | High | 7.8 | 2021-08-12 | Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability |
CVE-2021-36936 | High | 8.8 | 2021-08-12 | Windows Print Spooler Remote Code Execution Vulnerability |
CVE-2021-36933 | High | 7.5 | 2021-08-12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
CVE-2021-36932 | High | 7.5 | 2021-08-12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
CVE-2021-36927 | High | 7.8 | 2021-08-12 | Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability |
CVE-2021-36926 | High | 7.5 | 2021-08-12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
CVE-2021-36921 | High | 8.8 | 2021-08-12 | AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker ca… |
CVE-2021-34537 | High | 7.8 | 2021-08-12 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2021-34536 | High | 7.8 | 2021-08-12 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-34535 | High | 8.8 | 2021-08-12 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2021-34534 | Medium | 6.8 | 2021-08-12 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2021-34533 | High | 7.8 | 2021-08-12 | Windows Graphics Component Font Parsing Remote Code Execution Vulnerability |
CVE-2021-34532 | Medium | 5.5 | 2021-08-12 | ASP.NET Core and Visual Studio Information Disclosure Vulnerability |
CVE-2021-34530 | High | 7.8 | 2021-08-12 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2021-34524 | High | 8.1 | 2021-08-12 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2021-34487 | High | 7.0 | 2021-08-12 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-34486 | High | 7.8 | 2021-08-12 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-34485 | Medium | 5.0 | 2021-08-12 | .NET Core and Visual Studio Information Disclosure Vulnerability |
CVE-2021-34484 | High | 7.8 | 2021-08-12 | Windows User Profile Service Elevation of Privilege Vulnerability |
CVE-2021-34483 | High | 7.8 | 2021-08-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2021-34480 | Medium | 6.8 | 2021-08-12 | Scripting Engine Memory Corruption Vulnerability |
CVE-2021-34478 | High | 7.8 | 2021-08-12 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-34471 | High | 7.8 | 2021-08-12 | Microsoft Defender Elevation of Privilege Vulnerability |
CVE-2021-33762 | High | 7.0 | 2021-08-12 | Azure CycleCloud Elevation of Privilege Vulnerability |
CVE-2021-26433 | High | 7.5 | 2021-08-12 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
CVE-2021-26432 | Critical | 9.8 | 2021-08-12 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
CVE-2021-26431 | High | 7.8 | 2021-08-12 | Windows Recovery Environment Agent Elevation of Privilege Vulnerability |
CVE-2021-26430 | Medium | 6.0 | 2021-08-12 | Azure Sphere Denial of Service Vulnerability |
CVE-2021-26429 | High | 7.7 | 2021-08-12 | Azure Sphere Elevation of Privilege Vulnerability |
CVE-2021-26428 | Medium | 4.4 | 2021-08-12 | Azure Sphere Information Disclosure Vulnerability |
CVE-2021-26426 | High | 7.0 | 2021-08-12 | Windows User Account Profile Picture Elevation of Privilege Vulnerability |
CVE-2021-26425 | High | 7.8 | 2021-08-12 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-26424 | Critical | 9.9 | 2021-08-12 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2021-26423 | High | 7.5 | 2021-08-12 | .NET Core and Visual Studio Denial of Service Vulnerability |
CVE-2021-32809 | Medium | 4.6 | 2021-08-12 | ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckedi… |
CVE-2021-32808 | High | 7.6 | 2021-08-12 | ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside… |
CVE-2021-38606 | Critical | 9.8 | 2021-08-12 | reNgine through 0.5 relies on a predictable directory name. |
CVE-2021-38604 | High | 7.5 | 2021-08-12 | In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer d… |
CVE-2021-38599 | High | 7.5 | 2021-08-12 | WAL-G before 1.1, when a non-libsodium build (e.g., one of the official binary releases published as GitHub Releases) is used, silently ignores the libsodium e… |
CVE-2021-38291 | High | 7.5 | 2021-08-12 | FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics.c. |
CVE-2021-20509 | Critical | 9.8 | 2021-08-12 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, cause… |
CVE-2021-38597 | Medium | 5.9 | 2021-08-12 | wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension. |
CVE-2021-35955 | Medium | 4.8 | 2021-08-12 | Contao >=4.0.0 allows backend XSS via HTML attributes to an HTML field. Fixed in 4.4.56, 4.9.18, 4.11.7. |
CVE-2021-27794 | High | 7.8 | 2021-08-12 | A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Logi… |
CVE-2021-27793 | Medium | 5.3 | 2021-08-12 | ntermittent authorization failure in aaa tacacs+ with Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and after 9.0.0, also in Brocade Fabric OS be… |
CVE-2021-27792 | High | 7.8 | 2021-08-12 | The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed… |
CVE-2021-27791 | Medium | 5.4 | 2021-08-12 | The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to… |
CVE-2021-27790 | High | 7.8 | 2021-08-12 | The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string function to process user i… |
CVE-2021-20314 | Critical | 9.8 | 2021-08-12 | Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via mali… |
CVE-2021-38088 | High | 7.8 | 2021-08-12 | Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking. |
CVE-2021-38087 | Medium | 6.1 | 2021-08-12 | Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009. |
CVE-2021-38086 | High | 7.8 | 2021-08-12 | Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacki… |
CVE-2021-37841 | High | 7.8 | 2021-08-12 | Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it… |
CVE-2021-37222 | Critical | 9.8 | 2021-08-12 | Parsers in the open source project RCDCAP before 1.0.5 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app… |
CVE-2021-38593 | High | 7.5 | 2021-08-12 | Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx… |
CVE-2021-38592 | High | 7.5 | 2021-08-12 | Wasm3 0.5.0 has a heap-based buffer overflow in op_Const64 (called from EvaluateExpression and m3_LoadModule). |
CVE-2021-38591 | Low | 3.3 | 2021-08-12 | An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can change some of the NvRAM content by lever… |
CVE-2021-37699 | Medium | 6.9 | 2021-08-12 | Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when page… |
CVE-2021-38590 | Medium | 5.5 | 2021-08-11 | In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584). |
CVE-2021-38589 | High | 8.1 | 2021-08-11 | In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588). |
CVE-2021-38588 | High | 8.1 | 2021-08-11 | In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587). |
CVE-2021-38587 | High | 7.5 | 2021-08-11 | In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586). |
CVE-2021-38586 | Medium | 4.4 | 2021-08-11 | In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589). |
CVE-2021-38585 | High | 7.2 | 2021-08-11 | The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585). |
CVE-2021-38584 | High | 7.2 | 2021-08-11 | The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585). |
CVE-2021-37697 | High | 7.1 | 2021-08-11 | tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive… |
CVE-2021-37696 | High | 7.1 | 2021-08-11 | tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive… |
CVE-2021-37627 | High | 8.0 | 2021-08-11 | Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is possible to gain privileged rights in t… |
CVE-2021-37626 | High | 7.2 | 2021-08-11 | Contao is an open source CMS that allows you to create websites and scalable web applications. In affected versions it is possible to load PHP files by enterin… |
CVE-2021-36770 | High | 7.8 | 2021-08-11 | Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working… |
CVE-2021-38574 | Critical | 9.8 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string. |
CVE-2021-38573 | Critical | 9.8 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated. |
CVE-2021-38572 | Critical | 9.8 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated. |
CVE-2021-38571 | High | 7.8 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502. |
CVE-2021-38570 | Critical | 9.1 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink. |
CVE-2021-38569 | High | 7.5 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms… |
CVE-2021-38568 | Critical | 9.8 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document f… |
CVE-2021-38567 | High | 7.5 | 2021-08-11 | An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL po… |
CVE-2021-38566 | High | 7.5 | 2021-08-11 | An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML… |
CVE-2021-38565 | High | 7.5 | 2021-08-11 | An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm. |
CVE-2021-38564 | Critical | 9.1 | 2021-08-11 | An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand. |
CVE-2021-38563 | Critical | 9.8 | 2021-08-11 | An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from a /Size e… |
CVE-2021-1114 | Medium | 4.4 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service. |
CVE-2021-1113 | Medium | 4.7 | 2021-08-11 | NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources… |
CVE-2021-1112 | Medium | 5.5 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service. |
CVE-2021-1111 | Medium | 6.7 | 2021-08-11 | Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to… |
CVE-2021-1110 | High | 7.1 | 2021-08-11 | NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may le… |
CVE-2021-1109 | High | 7.2 | 2021-08-11 | NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data int… |
CVE-2021-1108 | High | 7.3 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complet… |
CVE-2021-1107 | High | 7.8 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code execution, complete… |
CVE-2021-1106 | High | 7.8 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privile… |
CVE-2021-22098 | Medium | 6.1 | 2021-08-11 | UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social en… |
CVE-2021-33794 | Critical | 9.1 | 2021-08-11 | Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form inte… |
CVE-2021-33793 | Critical | 9.8 | 2021-08-11 | Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conv… |
CVE-2021-32440 | Medium | 5.5 | 2021-08-11 | The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box comma… |
CVE-2021-32439 | High | 7.8 | 2021-08-11 | Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted f… |
CVE-2021-32438 | Medium | 5.5 | 2021-08-11 | The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box co… |
CVE-2021-32437 | Medium | 5.5 | 2021-08-11 | The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-38085 | High | 7.8 | 2021-08-11 | The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CN… |
CVE-2021-37694 | High | 8.7 | 2021-08-11 | @asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.7.0 arbitrary code injection was possib… |