2021 CVEs (page 163)
Page 163 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-29954 | Critical | 9.8 | 2021-06-24 | Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service. This vulnerability affects Hubs… |
CVE-2021-29953 | Medium | 6.1 | 2021-06-24 | A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a… |
CVE-2021-29952 | High | 7.5 | 2021-06-24 | When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploit… |
CVE-2021-29951 | Medium | 6.5 | 2021-06-24 | The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop th… |
CVE-2021-29950 | High | 7.5 | 2021-06-24 | Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may… |
CVE-2021-29949 | High | 7.8 | 2021-06-24 | When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distri… |
CVE-2021-29948 | Low | 2.5 | 2021-06-24 | Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replac… |
CVE-2021-29947 | High | 8.8 | 2021-06-24 | Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2021-29946 | High | 8.8 | 2021-06-24 | Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc hea… |
CVE-2021-29945 | Medium | 6.5 | 2021-06-24 | The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32… |
CVE-2021-29944 | Medium | 6.1 | 2021-06-24 | Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injectio… |
CVE-2021-27659 | Medium | 5.3 | 2021-06-24 | exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used… |
CVE-2021-27658 | Medium | 4.3 | 2021-06-24 | exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that i… |
CVE-2021-24002 | High | 8.8 | 2021-06-24 | When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary c… |
CVE-2021-24001 | Medium | 4.3 | 2021-06-24 | A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not res… |
CVE-2021-24000 | Low | 3.1 | 2021-06-24 | A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate t… |
CVE-2021-23999 | High | 8.8 | 2021-06-24 | If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should… |
CVE-2021-23998 | Medium | 6.5 | 2021-06-24 | Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox E… |
CVE-2021-23997 | High | 8.8 | 2021-06-24 | Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this cou… |
CVE-2021-23996 | Medium | 6.5 | 2021-06-24 | By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could… |
CVE-2021-23995 | High | 8.8 | 2021-06-24 | When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been expl… |
CVE-2021-23994 | High | 8.8 | 2021-06-24 | A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10… |
CVE-2021-23993 | Medium | 6.5 | 2021-06-24 | An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a sub… |
CVE-2021-23992 | Medium | 4.3 | 2021-06-24 | Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key… |
CVE-2021-23991 | Medium | 6.8 | 2021-06-24 | If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet b… |
CVE-2021-33604 | Low | 2.5 | 2021-06-24 | URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaad… |
CVE-2021-31412 | Medium | 5.3 | 2021-06-24 | Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0… |
CVE-2021-26585 | Medium | 5.5 | 2021-06-24 | A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HP… |
CVE-2021-25923 | High | 8.1 | 2021-06-24 | In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit. If a malicious user… |
CVE-2021-21737 | High | 7.5 | 2021-06-24 | A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could… |
CVE-2021-25656 | Medium | 5.3 | 2021-06-24 | Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially… |
CVE-2021-25655 | Medium | 4.4 | 2021-06-24 | A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack… |
CVE-2021-25653 | High | 8.0 | 2021-06-24 | A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to… |
CVE-2021-25652 | Medium | 4.9 | 2021-06-24 | An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). T… |
CVE-2021-25651 | High | 8.0 | 2021-06-24 | A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all… |
CVE-2021-25650 | High | 7.7 | 2021-06-24 | A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts… |
CVE-2021-25649 | Medium | 4.9 | 2021-06-24 | An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially… |
CVE-2021-28800 | High | 8.1 | 2021-06-24 | A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to exe… |
CVE-2021-35041 | High | 7.5 | 2021-06-24 | The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuous… |
CVE-2021-32823 | Low | 3.7 | 2021-06-24 | In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in… |
CVE-2021-2322 | High | 8.8 | 2021-06-23 | Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker… |
CVE-2021-34071 | Medium | 5.5 | 2021-06-23 | Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file. |
CVE-2021-34070 | Medium | 5.5 | 2021-06-23 | Out-of-bounds Read in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file. |
CVE-2021-34069 | Medium | 5.5 | 2021-06-23 | Divide-by-zero bug in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file. |
CVE-2021-34068 | Medium | 5.5 | 2021-06-23 | Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file. |
CVE-2021-34067 | Medium | 5.5 | 2021-06-23 | Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file. |
CVE-2021-21809 | Critical | 9.1 | 2021-06-23 | A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to comm… |
CVE-2021-20019 | High | 7.5 | 2021-06-23 | A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sens… |
CVE-2021-29620 | High | 7.5 | 2021-06-23 | Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML parsing was introduced. Unfortunately the… |
CVE-2021-33624 | Medium | 4.7 | 2021-06-23 | In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BP… |
CVE-2021-35438 | Medium | 6.1 | 2021-06-23 | phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator. |
CVE-2021-28977 | Medium | 4.8 | 2021-06-23 | Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla… |
CVE-2021-28976 | High | 7.2 | 2021-06-23 | Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess. |
CVE-2021-31586 | High | 8.8 | 2021-06-23 | Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search. |
CVE-2021-31585 | Medium | 6.7 | 2021-06-23 | Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access. |
CVE-2021-21999 | High | 7.8 | 2021-06-23 | VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 pr… |
CVE-2021-21998 | Critical | 9.8 | 2021-06-23 | VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A malicious actor with network access to the… |
CVE-2021-35210 | Medium | 6.1 | 2021-06-23 | Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject code into the tl_log table that will be… |
CVE-2021-29087 | High | 7.5 | 2021-06-23 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6… |
CVE-2021-29086 | Medium | 5.3 | 2021-06-23 | Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows… |
CVE-2021-29085 | High | 8.6 | 2021-06-23 | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synolo… |
CVE-2021-29084 | High | 7.5 | 2021-06-23 | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management componen… |
CVE-2021-27649 | Critical | 9.8 | 2021-06-23 | Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute… |
CVE-2021-34397 | Low | 1.9 | 2021-06-22 | Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service. |
CVE-2021-34396 | Low | 3.0 | 2021-06-22 | Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in l… |
CVE-2021-34395 | Low | 3.9 | 2021-06-22 | Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privilege… |
CVE-2021-34394 | Medium | 4.2 | 2021-06-22 | Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deserialization allows an attacker to use th… |
CVE-2021-34393 | Medium | 4.2 | 2021-06-22 | Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability mig… |
CVE-2021-34392 | Medium | 4.4 | 2021-06-22 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which migh… |
CVE-2021-34391 | Medium | 5.3 | 2021-06-22 | Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC… |
CVE-2021-34390 | Medium | 5.3 | 2021-06-22 | Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC… |
CVE-2021-34372 | High | 8.2 | 2021-06-22 | Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer… |
CVE-2021-32701 | High | 7.5 | 2021-06-22 | ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. When you make a… |
CVE-2021-32700 | Critical | 9.1 | 2021-06-22 | Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.x and SL releases up to alpha 3 have a… |
CVE-2021-32699 | Medium | 6.5 | 2021-06-22 | Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to `1.4.4` are vulnerable t… |
CVE-2021-22383 | Medium | 4.9 | 2021-06-22 | There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerabil… |
CVE-2021-22382 | Medium | 6.5 | 2021-06-22 | Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to inst… |
CVE-2021-22378 | Medium | 5.3 | 2021-06-22 | There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by ano… |
CVE-2021-22377 | High | 7.2 | 2021-06-22 | There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V20… |
CVE-2021-22363 | High | 7.5 | 2021-06-22 | There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker needs to perform specific operations to exploit the vulnerabili… |
CVE-2021-22342 | Medium | 4.9 | 2021-06-22 | There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit th… |
CVE-2021-3044 | Critical | 9.8 | 2021-06-22 | An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR se… |
CVE-2021-32644 | Medium | 6.4 | 2021-06-22 | Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering versions 4.x.y are vulnerable to code… |
CVE-2021-22366 | Medium | 5.5 | 2021-06-22 | There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a function th… |
CVE-2021-22365 | Low | 3.3 | 2021-06-22 | There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnera… |
CVE-2021-22361 | High | 7.8 | 2021-06-22 | There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is no… |
CVE-2021-34428 | Low | 2.9 | 2021-06-22 | For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID i… |
CVE-2021-35206 | Medium | 6.1 | 2021-06-22 | Gitpod before 0.6.0 allows unvalidated redirects. |
CVE-2021-35046 | Medium | 6.1 | 2021-06-22 | A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted session cookie. |
CVE-2021-35045 | Medium | 6.1 | 2021-06-22 | Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint. |
CVE-2021-34244 | High | 8.8 | 2021-06-22 | A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or change users' pass… |
CVE-2021-34243 | Medium | 5.4 | 2021-06-22 | A stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute arbitrary web scripts or HTML via a cra… |
CVE-2021-0608 | High | 7.8 | 2021-06-22 | In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation of pr… |
CVE-2021-0607 | High | 7.8 | 2021-06-22 | In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could lead to loc… |
CVE-2021-0606 | Medium | 6.7 | 2021-06-22 | In drm_syncobj_handle_to_fd of drm_syncobj.c, there is a possible use after free due to incorrect refcounting. This could lead to local escalation of privilege… |
CVE-2021-0605 | Medium | 4.4 | 2021-06-22 | In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel… |
CVE-2021-0553 | High | 7.3 | 2021-06-22 | In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. This could lead to local escalation of… |
CVE-2021-0552 | Medium | 5.5 | 2021-06-22 | In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information d… |
CVE-2021-0551 | Medium | 6.5 | 2021-06-22 | In bind of MediaControlPanel.java, there is a possible way to lock up the system UI using a malicious media file due to improper input validation. This could l… |
CVE-2021-0550 | High | 7.8 | 2021-06-22 | In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused deputy. Thi… |