2021 CVEs (page 148)
Page 148 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-31878 | Medium | 6.5 | 2021-07-30 | An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a B… |
CVE-2021-31799 | High | 7.0 | 2021-07-30 | In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. |
CVE-2021-30483 | Medium | 5.3 | 2021-07-30 | isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository. |
CVE-2021-30124 | Critical | 9.8 | 2021-07-30 | The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a craft… |
CVE-2021-28966 | High | 7.5 | 2021-07-30 | In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir. |
CVE-2021-28674 | Medium | 5.4 | 2021-07-30 | The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node (outside of the attacker's perimeter) v… |
CVE-2021-28095 | Medium | 4.8 | 2021-07-30 | OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32. |
CVE-2021-28094 | Medium | 6.5 | 2021-07-30 | OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32. |
CVE-2021-28093 | Medium | 6.5 | 2021-07-30 | OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due to use of Adler32. |
CVE-2021-25200 | Critical | 9.8 | 2021-07-30 | Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\… |
CVE-2021-20789 | Medium | 6.1 | 2021-07-30 | Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to th… |
CVE-2021-20788 | Medium | 4.3 | 2021-07-30 | Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byClou… |
CVE-2021-20787 | Medium | 4.8 | 2021-07-30 | Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0… |
CVE-2021-20786 | Medium | 4.3 | 2021-07-30 | Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud… |
CVE-2021-20785 | Medium | 4.8 | 2021-07-30 | Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0… |
CVE-2021-20783 | High | 8.8 | 2021-07-30 | Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a spec… |
CVE-2021-20114 | High | 7.5 | 2021-07-30 | When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which include… |
CVE-2021-20113 | Medium | 5.3 | 2021-07-30 | An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address that was not registere… |
CVE-2021-20112 | Medium | 5.4 | 2021-07-30 | A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_select_mediafile.php with a filename beggining with a peri… |
CVE-2021-20111 | Medium | 5.4 | 2021-07-30 | A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_filemanager.php with a filename beggining with a period wi… |
CVE-2021-29781 | Critical | 9.8 | 2021-07-30 | IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending… |
CVE-2021-29736 | High | 8.8 | 2021-07-30 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the system. IBM X-Force ID: 201300. |
CVE-2021-36742 | High | 7.8 | 2021-07-29 | A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a loca… |
CVE-2021-36741 | High | 8.8 | 2021-07-29 | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a re… |
CVE-2021-25273 | Medium | 4.8 | 2021-07-29 | Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706. |
CVE-2021-23418 | Medium | 6.3 | 2021-07-29 | The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be v… |
CVE-2021-21546 | High | 7.8 | 2021-07-29 | Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information Disclosure in Log Files vulnerability. A local low-privileged user… |
CVE-2021-21538 | Critical | 9.6 | 2021-07-29 | Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker cou… |
CVE-2021-20505 | Medium | 4.4 | 2021-07-29 | The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an atta… |
CVE-2021-37578 | Critical | 9.8 | 2021-07-29 | Apache jUDDI uses several classes related to Java's Remote Method Invocation (RMI) which (as an extension to UDDI) provides an alternate transport for accessin… |
CVE-2021-23417 | Medium | 5.6 | 2021-07-28 | All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function. |
CVE-2021-23416 | Medium | 5.4 | 2021-07-28 | This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input. |
CVE-2021-23415 | High | 7.5 | 2021-07-28 | This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path. |
CVE-2021-32001 | Medium | 6.5 | 2021-07-28 | K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material… |
CVE-2021-32000 | Low | 3.2 | 2021-07-28 | A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3… |
CVE-2021-23414 | Medium | 6.5 | 2021-07-28 | This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code. |
CVE-2021-32796 | Medium | 6.5 | 2021-07-27 | xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not c… |
CVE-2021-32788 | Medium | 4.3 | 2021-07-27 | Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed t… |
CVE-2021-32748 | Medium | 4.3 | 2021-07-27 | Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI ("Web Application Open Platform Interface") protocol to communicat… |
CVE-2021-34432 | High | 7.5 | 2021-07-27 | In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0. |
CVE-2021-20562 | Medium | 5.4 | 2021-07-27 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allow… |
CVE-2021-20399 | Critical | 9.1 | 2021-07-27 | IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote… |
CVE-2021-37576 | High | 7.8 | 2021-07-26 | arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas… |
CVE-2021-37555 | Critical | 9.8 | 2021-07-26 | TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is us… |
CVE-2021-32795 | Medium | 6.5 | 2021-07-26 | ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of S… |
CVE-2021-32794 | Medium | 6.8 | 2021-07-26 | ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code `POST /Api/ASF` A… |
CVE-2021-37478 | Critical | 9.8 | 2021-07-26 | In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitrary sql query execut… |
CVE-2021-37477 | Critical | 9.8 | 2021-07-26 | In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which results in arbitrary sq… |
CVE-2021-37476 | Critical | 9.8 | 2021-07-26 | In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, which results in arb… |
CVE-2021-37475 | Critical | 9.8 | 2021-07-26 | In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in a… |
CVE-2021-37473 | Critical | 9.8 | 2021-07-26 | In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which re… |
CVE-2021-37394 | High | 8.8 | 2021-07-26 | In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration. |
CVE-2021-37393 | Medium | 5.4 | 2021-07-26 | In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to injec… |
CVE-2021-37392 | Medium | 5.4 | 2021-07-26 | In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can… |
CVE-2021-36563 | Medium | 5.4 | 2021-07-26 | The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the WATO module. This allows an attacker to… |
CVE-2021-32792 | Low | 3.1 | 2021-07-26 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating use… |
CVE-2021-32791 | Medium | 5.9 | 2021-07-26 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating use… |
CVE-2021-32790 | Medium | 4.9 | 2021-07-26 | Woocommerce is an open source eCommerce plugin for WordPress. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce plugin betwe… |
CVE-2021-31292 | High | 7.5 | 2021-07-26 | An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via cr… |
CVE-2021-25804 | High | 7.5 | 2021-07-26 | A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application. |
CVE-2021-25803 | High | 7.1 | 2021-07-26 | A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read v… |
CVE-2021-25802 | High | 7.1 | 2021-07-26 | A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a… |
CVE-2021-25801 | High | 7.1 | 2021-07-26 | A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted… |
CVE-2021-32789 | High | 7.5 | 2021-07-26 | woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running… |
CVE-2021-32631 | Medium | 6.5 | 2021-07-26 | Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not pro… |
CVE-2021-33629 | High | 7.5 | 2021-07-26 | isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when pro… |
CVE-2021-37534 | Medium | 5.4 | 2021-07-26 | app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster. |
CVE-2021-26824 | High | 7.1 | 2021-07-26 | DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentica… |
CVE-2021-3664 | Medium | 5.3 | 2021-07-26 | url-parse is vulnerable to URL Redirection to Untrusted Site |
CVE-2021-35030 | Low | 3.5 | 2021-07-26 | A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authe… |
CVE-2021-29784 | Medium | 4.3 | 2021-07-26 | IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the… |
CVE-2021-29770 | Medium | 6.5 | 2021-07-26 | IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous i… |
CVE-2021-29769 | Medium | 4.3 | 2021-07-26 | IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attack… |
CVE-2021-29767 | Medium | 5.3 | 2021-07-26 | IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message… |
CVE-2021-29766 | Medium | 5.3 | 2021-07-26 | IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed techni… |
CVE-2021-22144 | Medium | 6.5 | 2021-07-26 | In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the… |
CVE-2021-20560 | Medium | 5.4 | 2021-07-26 | IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading… |
CVE-2021-20431 | Medium | 6.5 | 2021-07-26 | IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive informa… |
CVE-2021-20430 | Medium | 5.3 | 2021-07-26 | IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed techni… |
CVE-2021-20337 | High | 7.5 | 2021-07-26 | IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly… |
CVE-2021-33900 | High | 7.5 | 2021-07-26 | While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAP… |
CVE-2021-36092 | Medium | 6.5 | 2021-07-26 | It's possible to create an email which contains specially crafted link and it can be used to perform XSS attack. This issue affects: OTRS AG ((OTRS)) Community… |
CVE-2021-36091 | Low | 3.5 | 2021-07-26 | Agents are able to list appointments in the calendars without required permissions. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1… |
CVE-2021-21443 | Low | 3.5 | 2021-07-26 | Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG ((OTRS)) Community Edition: 6… |
CVE-2021-21442 | Medium | 4.5 | 2021-07-26 | In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue af… |
CVE-2021-21440 | Medium | 5.2 | 2021-07-26 | Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x… |
CVE-2021-37449 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected). |
CVE-2021-37448 | Medium | 5.4 | 2021-07-25 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored). |
CVE-2021-37447 | High | 8.1 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion. |
CVE-2021-37446 | Medium | 4.3 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading. |
CVE-2021-37445 | Medium | 6.5 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading. |
CVE-2021-37444 | High | 8.8 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a Z… |
CVE-2021-37443 | High | 8.1 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion. |
CVE-2021-37442 | Medium | 6.5 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files. |
CVE-2021-37441 | High | 8.8 | 2021-07-25 | NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring. |
CVE-2021-37440 | Medium | 6.5 | 2021-07-25 | NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring. |
CVE-2021-37439 | Medium | 6.5 | 2021-07-25 | NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability. |
CVE-2021-37470 | Medium | 5.4 | 2021-07-25 | In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field t… |
CVE-2021-37469 | Medium | 6.5 | 2021-07-25 | In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem. |
CVE-2021-37468 | Low | 3.3 | 2021-07-25 | NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files. |