2021 CVEs (page 164)
Page 164 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0549 | Medium | 4.4 | 2021-06-22 | In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local… |
CVE-2021-0548 | High | 7.8 | 2021-06-22 | In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege w… |
CVE-2021-0547 | High | 7.8 | 2021-06-22 | In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a missing permission chec… |
CVE-2021-0546 | Medium | 6.7 | 2021-06-22 | In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2021-0545 | Medium | 6.7 | 2021-06-22 | In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2021-0544 | Medium | 6.7 | 2021-06-22 | In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2021-0543 | Medium | 6.7 | 2021-06-22 | In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation o… |
CVE-2021-0542 | Medium | 5.5 | 2021-06-22 | In updateNotification of BeamTransferManager.java, there is a missing permission check. This could lead to local information disclosure of paired Bluetooth add… |
CVE-2021-0541 | Medium | 4.4 | 2021-06-22 | In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local i… |
CVE-2021-0540 | Medium | 6.7 | 2021-06-22 | In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2021-0539 | High | 7.8 | 2021-06-22 | In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission check… |
CVE-2021-0538 | High | 7.3 | 2021-06-22 | In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This could lead to… |
CVE-2021-0537 | High | 7.3 | 2021-06-22 | In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tapjacking/overlay attack. This could lead… |
CVE-2021-0536 | High | 7.8 | 2021-06-22 | In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalation of privi… |
CVE-2021-0572 | Medium | 5.5 | 2021-06-22 | In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information dis… |
CVE-2021-0571 | High | 7.8 | 2021-06-22 | In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and AppTaskImpl.java, there is possible access… |
CVE-2021-0570 | High | 7.8 | 2021-06-22 | In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local e… |
CVE-2021-0569 | Medium | 5.0 | 2021-06-22 | In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosu… |
CVE-2021-0568 | High | 7.8 | 2021-06-22 | In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing permission check. This could lead to local… |
CVE-2021-0567 | High | 7.8 | 2021-06-22 | In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege… |
CVE-2021-0566 | Medium | 4.4 | 2021-06-22 | In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2021-0565 | High | 7.0 | 2021-06-22 | In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no addi… |
CVE-2021-0564 | Medium | 6.4 | 2021-06-22 | In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execut… |
CVE-2021-0563 | Medium | 5.5 | 2021-06-22 | In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informati… |
CVE-2021-0562 | Medium | 5.5 | 2021-06-22 | In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2021-0561 | Medium | 5.5 | 2021-06-22 | In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local info… |
CVE-2021-0559 | Medium | 6.5 | 2021-06-22 | In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no addi… |
CVE-2021-0558 | Medium | 6.5 | 2021-06-22 | In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information discl… |
CVE-2021-0557 | High | 8.8 | 2021-06-22 | In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional exe… |
CVE-2021-0556 | Medium | 5.5 | 2021-06-22 | In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no… |
CVE-2021-0555 | High | 7.5 | 2021-06-22 | In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no addi… |
CVE-2021-0554 | Medium | 5.5 | 2021-06-22 | In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2021-0535 | Medium | 6.7 | 2021-06-22 | In wpas_ctrl_msg_queue_timeout of ctrl_iface_unix.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of priv… |
CVE-2021-0534 | High | 7.8 | 2021-06-22 | In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to l… |
CVE-2021-20744 | Medium | 6.1 | 2021-06-22 | Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inj… |
CVE-2021-20743 | Medium | 6.1 | 2021-06-22 | Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 allows a remote atta… |
CVE-2021-20742 | Medium | 6.1 | 2021-06-22 | Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to… |
CVE-2021-20741 | Medium | 6.1 | 2021-06-22 | Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) version 10-11-01 and earlier and Hitachi… |
CVE-2021-20737 | Medium | 6.5 | 2021-06-22 | Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via… |
CVE-2021-20736 | Critical | 9.1 | 2021-06-22 | NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via uns… |
CVE-2021-20735 | Medium | 6.1 | 2021-06-22 | Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip number csv bulk registr… |
CVE-2021-20734 | Medium | 6.1 | 2021-06-22 | Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vec… |
CVE-2021-20733 | Medium | 6.1 | 2021-06-22 | Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット (asken diet) for Android versions from v.3.0.0 to v.4.2.x allows a remote at… |
CVE-2021-35196 | High | 7.8 | 2021-06-21 | Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a project file, because there is insecure des… |
CVE-2021-34389 | Medium | 5.0 | 2021-06-21 | Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check can allow a local user… |
CVE-2021-34388 | Medium | 6.3 | 2021-06-21 | Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to control all the RAM after the heap block, le… |
CVE-2021-34387 | Medium | 6.3 | 2021-06-21 | The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for Trus… |
CVE-2021-34386 | Medium | 6.3 | 2021-06-21 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and… |
CVE-2021-32698 | Medium | 6.8 | 2021-06-21 | eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is… |
CVE-2021-35066 | Critical | 9.8 | 2021-06-21 | An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132. |
CVE-2021-29063 | High | 7.5 | 2021-06-21 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called. |
CVE-2021-29061 | High | 7.5 | 2021-06-21 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attem… |
CVE-2021-24383 | Medium | 5.4 | 2021-06-21 | The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading… |
CVE-2021-24379 | Medium | 5.3 | 2021-06-21 | The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX req… |
CVE-2021-24378 | Medium | 4.8 | 2021-06-21 | The Autoptimize WordPress plugin before 2.7.8 does not check for malicious files such as .html in the archive uploaded via the 'Import Settings' feature. As a… |
CVE-2021-24377 | High | 8.1 | 2021-06-21 | The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' featur… |
CVE-2021-24376 | Critical | 9.8 | 2021-06-21 | The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Settings" feature, af… |
CVE-2021-24374 | Medium | 5.3 | 2021-06-21 | The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on th… |
CVE-2021-24373 | Medium | 6.1 | 2021-06-21 | The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in… |
CVE-2021-24372 | Medium | 6.1 | 2021-06-21 | The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an… |
CVE-2021-24370 | Critical | 9.8 | 2021-06-21 | The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution. |
CVE-2021-24369 | Medium | 5.4 | 2021-06-21 | In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fi… |
CVE-2021-24367 | Medium | 5.4 | 2021-06-21 | The WP Config File Editor WordPress plugin through 1.7.1 was affected by an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. |
CVE-2021-24366 | Medium | 5.4 | 2021-06-21 | The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and escape its Label settings, which could al… |
CVE-2021-24364 | Medium | 6.1 | 2021-06-21 | The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back… |
CVE-2021-24361 | Critical | 9.8 | 2021-06-21 | In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST param… |
CVE-2021-24339 | Medium | 5.4 | 2021-06-21 | The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnera… |
CVE-2021-24338 | Medium | 5.4 | 2021-06-21 | The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnera… |
CVE-2021-32697 | Medium | 6.5 | 2021-06-21 | neos/forms is an open source framework to build web forms. By crafting a special `GET` request containing a valid form state, a form can be submitted without i… |
CVE-2021-21422 | High | 8.1 | 2021-06-21 | mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-e… |
CVE-2021-26461 | Critical | 9.8 | 2021-06-21 | Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead… |
CVE-2021-0533 | High | 7.0 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2021-0532 | High | 7.0 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2021-0531 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2021-0530 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0529 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional… |
CVE-2021-0528 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0527 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2021-0526 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0525 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no addition… |
CVE-2021-0523 | High | 7.3 | 2021-06-21 | In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a tapjacking/overlay attack. This could… |
CVE-2021-0522 | High | 7.5 | 2021-06-21 | In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information dis… |
CVE-2021-0521 | Medium | 5.5 | 2021-06-21 | In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information… |
CVE-2021-0520 | High | 7.0 | 2021-06-21 | In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation… |
CVE-2021-0517 | High | 7.5 | 2021-06-21 | In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead… |
CVE-2021-0516 | Critical | 9.8 | 2021-06-21 | In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of pri… |
CVE-2021-0513 | High | 7.8 | 2021-06-21 | In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation… |
CVE-2021-0512 | High | 7.8 | 2021-06-21 | In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local esc… |
CVE-2021-0511 | High | 7.8 | 2021-06-21 | In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privi… |
CVE-2021-0510 | High | 7.8 | 2021-06-21 | In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |
CVE-2021-0509 | High | 7.0 | 2021-06-21 | In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2021-0508 | High | 7.0 | 2021-06-21 | In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no add… |
CVE-2021-0507 | High | 8.8 | 2021-06-21 | In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bl… |
CVE-2021-0506 | High | 7.3 | 2021-06-21 | In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escala… |
CVE-2021-0505 | High | 7.8 | 2021-06-21 | In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege wi… |
CVE-2021-0504 | Medium | 6.5 | 2021-06-21 | In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… |
CVE-2021-0478 | High | 7.8 | 2021-06-21 | In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privile… |
CVE-2021-29060 | Medium | 5.3 | 2021-06-21 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provid… |
CVE-2021-29059 | High | 7.5 | 2021-06-21 | A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is pro… |
CVE-2021-28833 | Medium | 6.1 | 2021-06-21 | Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796. |