2021 CVEs (page 180)
Page 180 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32611 | High | 7.5 | 2021-05-12 | A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect responses. |
CVE-2021-32572 | High | 7.5 | 2021-05-12 | Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd… |
CVE-2021-3457 | Medium | 6.1 | 2021-05-12 | An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should b… |
CVE-2021-32608 | Critical | 9.8 | 2021-05-12 | An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials/_ForumPost.cshtml does not call HtmlUtils.SanitizeHtml on certai… |
CVE-2021-32607 | Critical | 9.8 | 2021-05-12 | An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private me… |
CVE-2021-31519 | High | 7.3 | 2021-05-12 | An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an at… |
CVE-2021-28649 | High | 7.3 | 2021-05-12 | An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker t… |
CVE-2021-20202 | High | 7.3 | 2021-05-12 | A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, a… |
CVE-2021-31341 | Medium | 4.3 | 2021-05-12 | Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-fram… |
CVE-2021-31339 | Medium | 4.3 | 2021-05-12 | A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XML File results in an exception that coul… |
CVE-2021-27398 | High | 7.8 | 2021-05-12 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-suppl… |
CVE-2021-27397 | High | 7.8 | 2021-05-12 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-suppl… |
CVE-2021-27396 | High | 7.8 | 2021-05-12 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-suppl… |
CVE-2021-27386 | High | 7.5 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-27385 | High | 7.5 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-27384 | Critical | 9.8 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-27383 | High | 7.5 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-25662 | High | 7.5 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-25661 | High | 7.5 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-25660 | High | 7.5 | 2021-05-12 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI C… |
CVE-2021-20277 | High | 7.5 | 2021-05-12 | A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of… |
CVE-2021-23892 | High | 8.2 | 2021-05-12 | By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) install… |
CVE-2021-23891 | High | 7.8 | 2021-05-12 | Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client… |
CVE-2021-23872 | High | 7.8 | 2021-05-12 | Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges… |
CVE-2021-3504 | Medium | 5.4 | 2021-05-11 | A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could i… |
CVE-2021-32606 | High | 7.8 | 2021-05-11 | In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not… |
CVE-2021-32605 | Critical | 9.8 | 2021-05-11 | zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonst… |
CVE-2021-32604 | Medium | 5.4 | 2021-05-11 | Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS." |
CVE-2021-20313 | High | 7.5 | 2021-05-11 | A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest… |
CVE-2021-20312 | High | 7.5 | 2021-05-11 | A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a… |
CVE-2021-20311 | High | 7.5 | 2021-05-11 | A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefine… |
CVE-2021-20310 | High | 7.5 | 2021-05-11 | A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behav… |
CVE-2021-20309 | High | 7.5 | 2021-05-11 | A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger… |
CVE-2021-32089 | Critical | 9.8 | 2021-05-11 | An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices. An unauthenticated attacker can upload arbitrary files to the… |
CVE-2021-31936 | High | 7.4 | 2021-05-11 | Microsoft Accessibility Insights for Web Information Disclosure Vulnerability |
CVE-2021-31214 | High | 7.8 | 2021-05-11 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2021-31213 | High | 7.8 | 2021-05-11 | Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability |
CVE-2021-31211 | High | 7.8 | 2021-05-11 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2021-31209 | Medium | 6.5 | 2021-05-11 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2021-31208 | High | 7.8 | 2021-05-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2021-31207 | Medium | 6.6 | 2021-05-11 | Microsoft Exchange Server Security Feature Bypass Vulnerability |
CVE-2021-31205 | Medium | 6.5 | 2021-05-11 | Windows SMB Client Security Feature Bypass Vulnerability |
CVE-2021-31204 | High | 7.3 | 2021-05-11 | .NET and Visual Studio Elevation of Privilege Vulnerability |
CVE-2021-31200 | High | 7.2 | 2021-05-11 | Common Utilities Remote Code Execution Vulnerability |
CVE-2021-31198 | High | 7.8 | 2021-05-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-31195 | Medium | 6.5 | 2021-05-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-31194 | High | 8.8 | 2021-05-11 | OLE Automation Remote Code Execution Vulnerability |
CVE-2021-31193 | High | 7.8 | 2021-05-11 | Windows SSDP Service Elevation of Privilege Vulnerability |
CVE-2021-31192 | High | 7.8 | 2021-05-11 | Windows Media Foundation Core Remote Code Execution Vulnerability |
CVE-2021-31191 | Medium | 5.5 | 2021-05-11 | Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
CVE-2021-31190 | High | 7.8 | 2021-05-11 | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
CVE-2021-31188 | High | 7.8 | 2021-05-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2021-31187 | High | 7.8 | 2021-05-11 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-31186 | High | 7.4 | 2021-05-11 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
CVE-2021-31185 | Medium | 5.5 | 2021-05-11 | Windows Desktop Bridge Denial of Service Vulnerability |
CVE-2021-31184 | Medium | 5.5 | 2021-05-11 | Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability |
CVE-2021-31182 | High | 7.1 | 2021-05-11 | Microsoft Bluetooth Driver Spoofing Vulnerability |
CVE-2021-31181 | High | 8.8 | 2021-05-11 | Microsoft SharePoint Remote Code Execution Vulnerability |
CVE-2021-31180 | High | 7.8 | 2021-05-11 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2021-31179 | High | 7.8 | 2021-05-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-31178 | Medium | 5.5 | 2021-05-11 | Microsoft Office Information Disclosure Vulnerability |
CVE-2021-31177 | High | 7.8 | 2021-05-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-31176 | High | 7.8 | 2021-05-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-31175 | High | 7.8 | 2021-05-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-31174 | Medium | 5.5 | 2021-05-11 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2021-31173 | Medium | 5.3 | 2021-05-11 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2021-31172 | High | 7.1 | 2021-05-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-31171 | Medium | 4.1 | 2021-05-11 | Microsoft SharePoint Information Disclosure Vulnerability |
CVE-2021-31170 | High | 7.8 | 2021-05-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2021-31169 | High | 7.8 | 2021-05-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2021-31168 | High | 7.8 | 2021-05-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2021-31167 | High | 7.8 | 2021-05-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2021-31166 | Critical | 9.8 | 2021-05-11 | HTTP Protocol Stack Remote Code Execution Vulnerability |
CVE-2021-31165 | High | 7.8 | 2021-05-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2021-28479 | Medium | 5.5 | 2021-05-11 | Windows CSC Service Information Disclosure Vulnerability |
CVE-2021-28478 | High | 7.6 | 2021-05-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-28476 | Critical | 9.9 | 2021-05-11 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2021-28474 | High | 8.8 | 2021-05-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2021-28465 | High | 7.8 | 2021-05-11 | Web Media Extensions Remote Code Execution Vulnerability |
CVE-2021-28461 | Medium | 6.1 | 2021-05-11 | Dynamics Finance and Operations Cross-site Scripting Vulnerability |
CVE-2021-28455 | High | 8.8 | 2021-05-11 | Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability |
CVE-2021-27068 | High | 8.8 | 2021-05-11 | Visual Studio Remote Code Execution Vulnerability |
CVE-2021-26422 | High | 7.2 | 2021-05-11 | Skype for Business and Lync Remote Code Execution Vulnerability |
CVE-2021-26421 | Medium | 6.5 | 2021-05-11 | Skype for Business and Lync Spoofing Vulnerability |
CVE-2021-26419 | High | 7.5 | 2021-05-11 | Scripting Engine Memory Corruption Vulnerability |
CVE-2021-26418 | Medium | 4.6 | 2021-05-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-32573 | Medium | 4.8 | 2021-05-11 | The express-cart package through 1.1.10 for Node.js allows Reflected XSS (for an admin) via a user input field for product options. NOTE: the vendor states tha… |
CVE-2021-29509 | High | 7.5 | 2021-05-11 | Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connection… |
CVE-2021-29508 | Critical | 9.1 | 2021-05-11 | Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. e.g. using a surrogate on the sender… |
CVE-2021-31537 | Medium | 6.1 | 2021-05-11 | SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_g… |
CVE-2021-29471 | Low | 3.7 | 2021-05-11 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP… |
CVE-2021-27619 | Medium | 6.5 | 2021-05-11 | SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be d… |
CVE-2021-27618 | Medium | 4.9 | 2021-05-11 | The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the… |
CVE-2021-27617 | Medium | 4.9 | 2021-05-11 | The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML documen… |
CVE-2021-27616 | High | 7.8 | 2021-05-11 | Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows… |
CVE-2021-27614 | High | 7.1 | 2021-05-11 | SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code… |
CVE-2021-27613 | High | 7.8 | 2021-05-11 | Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure… |
CVE-2021-27612 | Medium | 6.1 | 2021-05-11 | In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or… |
CVE-2021-27611 | Medium | 6.7 | 2021-05-11 | SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attac… |
CVE-2021-21656 | High | 7.1 | 2021-05-11 | Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |