2021 CVEs (page 143)
Page 143 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38197 | Critical | 9.8 | 2021-08-08 | unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive. |
CVE-2021-23419 | High | 7.3 | 2021-08-08 | This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__… |
CVE-2021-38196 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the better-macro crate through 2021-07-22 for Rust. It intentionally demonstrates that remote attackers can execute arbitrary code v… |
CVE-2021-38195 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger… |
CVE-2021-38194 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mul_by_inverse method. Thus, a pr… |
CVE-2021-38193 | Medium | 6.1 | 2021-08-08 | An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a s… |
CVE-2021-38192 | High | 7.5 | 2021-08-08 | An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime. |
CVE-2021-38191 | Medium | 5.9 | 2021-08-08 | An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread. |
CVE-2021-38190 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of eleme… |
CVE-2021-38189 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the lettre crate before 0.9.6 for Rust. In an e-mail message body, an attacker can place a . character after two <CR><LF> sequences… |
CVE-2021-38188 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.length()) is used unsafely. |
CVE-2021-38187 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a *u64. |
CVE-2021-38186 | Medium | 6.1 | 2021-08-08 | An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities. |
CVE-2021-36221 | Medium | 5.9 | 2021-08-08 | Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort. |
CVE-2021-38185 | High | 7.8 | 2021-08-08 | GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers a… |
CVE-2021-38173 | Critical | 9.8 | 2021-08-07 | Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys. |
CVE-2021-38169 | High | 8.8 | 2021-08-07 | Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py. |
CVE-2021-38168 | High | 8.8 | 2021-08-07 | Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers. |
CVE-2021-38167 | Critical | 9.8 | 2021-08-07 | Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication. |
CVE-2021-38166 | High | 7.8 | 2021-08-07 | In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single buck… |
CVE-2021-38165 | Medium | 5.3 | 2021-08-07 | Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SN… |
CVE-2021-38159 | Critical | 9.8 | 2021-08-07 | In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web application could allow an unauthenticated… |
CVE-2021-29923 | High | 7.5 | 2021-08-07 | Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to by… |
CVE-2021-29922 | Critical | 9.1 | 2021-08-07 | library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in s… |
CVE-2021-38160 | High | 7.8 | 2021-08-07 | In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len va… |
CVE-2021-38148 | Critical | 9.8 | 2021-08-07 | Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs. |
CVE-2021-38157 | Medium | 6.1 | 2021-08-06 | LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects pr… |
CVE-2021-38155 | High | 7.5 | 2021-08-06 | OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account… |
CVE-2021-35312 | High | 7.8 | 2021-08-06 | A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Service.exe" has incorrect permissions, all… |
CVE-2021-36795 | High | 7.8 | 2021-08-06 | A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1. An underprivilege… |
CVE-2021-20598 | Medium | 5.3 | 2021-08-06 | Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/12… |
CVE-2021-20597 | Critical | 9.1 | 2021-08-06 | Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and p… |
CVE-2021-20594 | High | 7.5 | 2021-08-06 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmwa… |
CVE-2021-36455 | High | 8.8 | 2021-08-06 | SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comments.php. |
CVE-2021-36454 | Medium | 5.4 | 2021-08-06 | Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) blocks\blocks.php, 3) br… |
CVE-2021-38137 | High | 8.1 | 2021-08-06 | Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not b… |
CVE-2021-38136 | Medium | 6.5 | 2021-08-06 | Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/g… |
CVE-2021-26999 | Medium | 4.3 | 2021-08-06 | NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to a… |
CVE-2021-26998 | Medium | 4.3 | 2021-08-06 | NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users. Customers with auto-upgrade enabled shoul… |
CVE-2021-26606 | Critical | 9.8 | 2021-08-06 | A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficient validation of the… |
CVE-2021-37554 | Medium | 4.3 | 2021-08-06 | In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions. |
CVE-2021-37553 | High | 7.5 | 2021-08-06 | In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. |
CVE-2021-37552 | Medium | 5.4 | 2021-08-06 | In JetBrains YouTrack before 2021.2.17925, stored XSS was possible. |
CVE-2021-37551 | Medium | 5.3 | 2021-08-06 | In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. |
CVE-2021-37550 | High | 7.5 | 2021-08-06 | In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. |
CVE-2021-37549 | Critical | 9.1 | 2021-08-06 | In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. |
CVE-2021-37548 | High | 7.5 | 2021-08-06 | In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. |
CVE-2021-37547 | Medium | 5.3 | 2021-08-06 | In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made. |
CVE-2021-37546 | Medium | 5.3 | 2021-08-06 | In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used. |
CVE-2021-37545 | High | 7.5 | 2021-08-06 | In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. |
CVE-2021-37544 | Critical | 9.8 | 2021-08-06 | In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization. |
CVE-2021-37543 | High | 8.8 | 2021-08-06 | In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects. |
CVE-2021-37542 | Medium | 6.1 | 2021-08-06 | In JetBrains TeamCity before 2020.2.3, XSS was possible. |
CVE-2021-37541 | Medium | 6.1 | 2021-08-06 | In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible. |
CVE-2021-37540 | Medium | 6.5 | 2021-08-06 | In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used. |
CVE-2021-36708 | High | 7.5 | 2021-08-06 | In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interfa… |
CVE-2021-36707 | Critical | 9.8 | 2021-08-06 | In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial c… |
CVE-2021-36706 | Critical | 9.8 | 2021-08-06 | In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial comm… |
CVE-2021-36705 | Critical | 9.8 | 2021-08-06 | In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command… |
CVE-2021-36351 | Critical | 9.8 | 2021-08-06 | SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth, and (3) pyear parameters in GET reque… |
CVE-2021-36209 | Critical | 9.8 | 2021-08-06 | In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset. |
CVE-2021-37381 | High | 8.8 | 2021-08-06 | Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private information such as photos through CSRF. For example: any student's… |
CVE-2021-22295 | Medium | 5.5 | 2021-08-06 | A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to hang due to the page… |
CVE-2021-38152 | Medium | 5.4 | 2021-08-06 | index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS. |
CVE-2021-38151 | Medium | 5.4 | 2021-08-06 | index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS. |
CVE-2021-38149 | Medium | 5.4 | 2021-08-06 | index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS. |
CVE-2021-37388 | Critical | 9.8 | 2021-08-06 | A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver and might… |
CVE-2021-32597 | Medium | 4.6 | 2021-08-06 | Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and belo… |
CVE-2021-32587 | Medium | 4.3 | 2021-08-06 | An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and… |
CVE-2021-3655 | Low | 3.3 | 2021-08-05 | A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uni… |
CVE-2021-3642 | Medium | 5.3 | 2021-08-05 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to… |
CVE-2021-3580 | High | 7.5 | 2021-08-05 | A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ci… |
CVE-2021-3566 | Medium | 5.5 | 2021-08-05 | Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an i… |
CVE-2021-37632 | High | 8.1 | 2021-08-05 | SuperMartijn642's Config Lib is a library used by a number of mods for the game Minecraft. The versions of SuperMartijn642's Config Lib between 1.0.4 and 1.0.8… |
CVE-2021-37156 | High | 7.5 | 2021-08-05 | Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is f… |
CVE-2021-35327 | Critical | 9.8 | 2021-08-05 | A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start the Telnet service, then login with the default credentials v… |
CVE-2021-35326 | High | 7.5 | 2021-08-05 | A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configuration file via sending a crafted HTTP re… |
CVE-2021-35325 | High | 7.5 | 2021-08-05 | A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS). |
CVE-2021-35324 | Critical | 9.8 | 2021-08-05 | A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication. |
CVE-2021-34639 | High | 7.5 | 2021-08-05 | Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.p… |
CVE-2021-34638 | Medium | 6.5 | 2021-08-05 | Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file info… |
CVE-2021-34634 | High | 8.8 | 2021-08-05 | The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file wh… |
CVE-2021-34633 | High | 8.8 | 2021-08-05 | The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in the ~/youtube-feeder.php file which al… |
CVE-2021-32003 | High | 8.0 | 2021-08-05 | Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used afte… |
CVE-2021-32002 | Medium | 4.3 | 2021-08-05 | Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configu… |
CVE-2021-28216 | High | 7.8 | 2021-08-05 | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. |
CVE-2021-26605 | High | 7.5 | 2021-08-05 | An improper input validation vulnerability in the service of ezPDFReader allows attacker to execute arbitrary command. This issue occurred when the ezPDF launc… |
CVE-2021-26586 | High | 7.5 | 2021-08-05 | A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Softwar… |
CVE-2021-22928 | High | 7.8 | 2021-08-05 | A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile… |
CVE-2021-22927 | High | 8.1 | 2021-08-05 | A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijac… |
CVE-2021-22926 | High | 7.5 | 2021-08-05 | libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with th… |
CVE-2021-22925 | Medium | 5.3 | 2021-08-05 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET… |
CVE-2021-22924 | Low | 3.7 | 2021-08-05 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, t… |
CVE-2021-22923 | Medium | 5.3 | 2021-08-05 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credenti… |
CVE-2021-22922 | Medium | 6.5 | 2021-08-05 | When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink X… |
CVE-2021-22920 | Medium | 6.5 | 2021-08-05 | A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN… |
CVE-2021-22919 | High | 7.5 | 2021-08-05 | A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN… |
CVE-2021-22517 | High | 8.8 | 2021-08-05 | A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20… |
CVE-2021-22234 | Critical | 9.6 | 2021-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and al… |
CVE-2021-21893 | High | 8.8 | 2021-08-05 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.0.0.49893. A specially crafted PDF document can trigg… |