2021 CVEs (page 147)
Page 147 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-29741 | High | 7.8 | 2021-08-02 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges. IBM X-Force ID: 201478. |
CVE-2021-37840 | High | 8.8 | 2021-08-02 | aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must… |
CVE-2021-37167 | Critical | 9.8 | 2021-08-02 | An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus So… |
CVE-2021-37166 | High | 7.5 | 2021-08-02 | A buffer overflow issue leading to denial of service was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of s… |
CVE-2021-37164 | Critical | 9.8 | 2021-08-02 | A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software… |
CVE-2021-37163 | Critical | 9.8 | 2021-08-02 | An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software… |
CVE-2021-37162 | Critical | 9.8 | 2021-08-02 | A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software… |
CVE-2021-37161 | Critical | 9.8 | 2021-08-02 | A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, operated by released versions of softwar… |
CVE-2021-37160 | Critical | 9.8 | 2021-08-02 | A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Soft… |
CVE-2021-20332 | Medium | 4.2 | 2021-08-02 | Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted w… |
CVE-2021-37216 | Medium | 6.1 | 2021-08-02 | QSAN Storage Manager header page parameters does not filter special characters. Remote attackers can inject JavaScript without logging in and launch reflected… |
CVE-2021-37165 | Critical | 9.8 | 2021-08-02 | A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software… |
CVE-2021-34575 | High | 7.5 | 2021-08-02 | In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the serv… |
CVE-2021-34574 | Medium | 4.3 | 2021-08-02 | In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the… |
CVE-2021-33527 | Critical | 9.8 | 2021-08-02 | In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM… |
CVE-2021-33526 | High | 7.8 | 2021-08-02 | In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing… |
CVE-2021-24504 | Medium | 6.1 | 2021-08-02 | The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be… |
CVE-2021-24503 | Medium | 5.4 | 2021-08-02 | The Popular Brand Icons – Simple Icons WordPress plugin before 2.7.8 does not sanitise or validate some of its shortcode parameters, such as "color", "size" or… |
CVE-2021-24498 | Medium | 6.1 | 2021-08-02 | The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the pag… |
CVE-2021-24496 | Medium | 6.1 | 2021-08-02 | The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outpu… |
CVE-2021-24492 | High | 8.8 | 2021-08-02 | The hndtst_action_instance_callback AJAX call of the Handsome Testimonials & Reviews WordPress plugin before 2.1.1, available to any authenticated users, does… |
CVE-2021-24488 | Medium | 6.1 | 2021-08-02 | The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back… |
CVE-2021-24484 | High | 7.2 | 2021-08-02 | The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderb… |
CVE-2021-24483 | High | 7.2 | 2021-08-02 | The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderb… |
CVE-2021-24481 | Medium | 4.8 | 2021-08-02 | The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its "Allowed hosts" setting, leading to an authenticated stored XSS issue as high p… |
CVE-2021-24480 | Medium | 4.8 | 2021-08-02 | The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authentic… |
CVE-2021-24479 | Medium | 4.8 | 2021-08-02 | The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authentica… |
CVE-2021-24478 | Medium | 5.4 | 2021-08-02 | The Bookshelf WordPress plugin through 2.0.4 does not sanitise or escape its "Paypal email address" setting before outputting it in the page, leading to an aut… |
CVE-2021-24477 | Medium | 6.1 | 2021-08-02 | The Migrate Users WordPress plugin through 1.0.1 does not sanitise or escape its Delimiter option before outputting in a page, leading to a Stored Cross-Site S… |
CVE-2021-24476 | Medium | 5.4 | 2021-08-02 | The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to… |
CVE-2021-24474 | Medium | 6.1 | 2021-08-02 | The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthen… |
CVE-2021-24473 | Medium | 5.4 | 2021-08-02 | The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default author and ab… |
CVE-2021-24472 | Critical | 9.8 | 2021-08-02 | The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending r… |
CVE-2021-24470 | Medium | 5.4 | 2021-08-02 | The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scriptin… |
CVE-2021-24468 | Medium | 5.4 | 2021-08-02 | The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow user… |
CVE-2021-24464 | Medium | 5.4 | 2021-08-02 | The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available t… |
CVE-2021-24463 | High | 8.8 | 2021-08-02 | The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the order… |
CVE-2021-24462 | High | 8.8 | 2021-08-02 | The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whi… |
CVE-2021-24461 | High | 8.8 | 2021-08-02 | The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the orderby parameter before using it in SQL sta… |
CVE-2021-24460 | High | 8.8 | 2021-08-02 | The get_fb_likeboxes() function in the Popup Like box – Page Plugin WordPress plugin before 3.5.3 did not use whitelist or validate the orderby parameter befor… |
CVE-2021-24459 | High | 8.8 | 2021-08-02 | The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before us… |
CVE-2021-24458 | High | 8.8 | 2021-08-02 | The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby para… |
CVE-2021-24457 | High | 8.8 | 2021-08-02 | The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-a… |
CVE-2021-24456 | High | 7.2 | 2021-08-02 | The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leadi… |
CVE-2021-24455 | Medium | 5.4 | 2021-08-02 | The Tutor LMS – eLearning and online course solution WordPress plugin before 1.9.2 did not escape the Summary field of Announcements (when outputting it in an… |
CVE-2021-24450 | Medium | 4.8 | 2021-08-02 | The User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.8 did not sanitise or escape some… |
CVE-2021-24448 | Medium | 4.8 | 2021-08-02 | The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' sett… |
CVE-2021-24444 | Medium | 4.8 | 2021-08-02 | The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Taxonomy description field, allowing high… |
CVE-2021-24443 | Medium | 5.4 | 2021-08-02 | The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network & Membership WordPress plugin before 1.0.7 does not properly sanitise i… |
CVE-2021-24430 | High | 7.2 | 2021-08-02 | The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude_urls and caching_include_query_strings… |
CVE-2021-24428 | Medium | 4.8 | 2021-08-02 | The RSS for Yandex Turbo WordPress plugin through 1.30 does not sanitise or escape some of its settings before saving and outputing them in the admin dashboard… |
CVE-2021-24425 | Medium | 4.8 | 2021-08-02 | The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape… |
CVE-2021-24371 | Low | 2.7 | 2021-08-02 | The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, w… |
CVE-2021-3351 | Medium | 5.4 | 2021-08-02 | OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page. |
CVE-2021-34556 | Medium | 5.5 | 2021-08-02 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel… |
CVE-2021-35477 | Medium | 5.5 | 2021-08-02 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel… |
CVE-2021-32066 | High | 7.4 | 2021-08-01 | An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an… |
CVE-2021-37760 | Critical | 9.8 | 2021-07-31 | A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID). |
CVE-2021-37759 | Critical | 9.8 | 2021-07-31 | A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID). |
CVE-2021-33617 | Medium | 5.3 | 2021-07-31 | Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because th… |
CVE-2021-32807 | Medium | 4.4 | 2021-07-30 | The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides… |
CVE-2021-27495 | High | 7.1 | 2021-07-30 | Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,he Ypsomed myli… |
CVE-2021-27491 | High | 7.5 | 2021-07-30 | Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,The Ypsomed myl… |
CVE-2021-34630 | Medium | 5.0 | 2021-07-30 | In the Pro and Enterprise versions of GTranslate < 2.8.65, the gtranslate_request_uri_var function runs at the top of all pages and echoes out the contents of… |
CVE-2021-34629 | Medium | 4.3 | 2021-07-30 | The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file… |
CVE-2021-22521 | Medium | 6.7 | 2021-07-30 | A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versi… |
CVE-2021-3636 | Medium | 4.6 | 2021-07-30 | It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The… |
CVE-2021-35193 | High | 7.5 | 2021-07-30 | Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that… |
CVE-2021-29298 | Medium | 5.3 | 2021-07-30 | Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via craft… |
CVE-2021-29297 | Medium | 5.3 | 2021-07-30 | Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic… |
CVE-2021-37746 | Medium | 6.1 | 2021-07-30 | textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a clic… |
CVE-2021-37743 | Medium | 5.4 | 2021-07-30 | app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format. |
CVE-2021-37742 | Medium | 5.4 | 2021-07-30 | app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships. |
CVE-2021-37606 | Medium | 5.3 | 2021-07-30 | Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two… |
CVE-2021-37601 | High | 7.5 | 2021-07-30 | muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a… |
CVE-2021-37600 | Medium | 5.5 | 2021-07-30 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads t… |
CVE-2021-37596 | Medium | 6.1 | 2021-07-30 | Telegram Web K Alpha 0.6.1 allows XSS via a document name. |
CVE-2021-37595 | Critical | 9.8 | 2021-07-30 | In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE Fi… |
CVE-2021-37594 | Critical | 9.8 | 2021-07-30 | In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE Fil… |
CVE-2021-37593 | Critical | 9.1 | 2021-07-30 | PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to affect the executio… |
CVE-2021-37588 | Medium | 5.9 | 2021-07-30 | In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data. |
CVE-2021-37587 | Medium | 6.5 | 2021-07-30 | In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data. |
CVE-2021-37144 | Critical | 9.1 | 2021-07-30 | CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user input might affect portions of or the… |
CVE-2021-36983 | High | 7.8 | 2021-07-30 | replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/d… |
CVE-2021-36766 | High | 7.2 | 2021-07-30 | Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/dashboard/system/environment/logging.php… |
CVE-2021-36754 | High | 7.5 | 2021-07-30 | PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exc… |
CVE-2021-36624 | Critical | 9.8 | 2021-07-30 | Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. |
CVE-2021-36621 | High | 8.1 | 2021-07-30 | Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection… |
CVE-2021-36605 | Medium | 5.4 | 2021-07-30 | engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user list page. When viewing this page, the Jav… |
CVE-2021-36386 | High | 7.5 | 2021-07-30 | report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause… |
CVE-2021-36004 | High | 8.8 | 2021-07-30 | Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could levera… |
CVE-2021-35479 | Medium | 5.4 | 2021-07-30 | Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. Th… |
CVE-2021-35478 | Medium | 5.4 | 2021-07-30 | Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are a… |
CVE-2021-35472 | High | 8.8 | 2021-07-30 | An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes man… |
CVE-2021-35458 | Critical | 9.8 | 2021-07-30 | Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter. |
CVE-2021-34802 | High | 8.8 | 2021-07-30 | A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands… |
CVE-2021-34166 | Critical | 9.8 | 2021-07-30 | A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin. |
CVE-2021-34165 | Critical | 9.8 | 2021-07-30 | A SQL Injection vulnerability in Sourcecodester Basic Shopping Cart 1.0 allows a remote attacker to Bypass Authentication and become Admin. |
CVE-2021-32610 | High | 7.1 | 2021-07-30 | In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. |
CVE-2021-32558 | High | 7.5 | 2021-07-30 | An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before… |