2021 CVEs (page 193)
Page 193 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-28354 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28353 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28352 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28351 | High | 7.8 | 2021-04-13 | Windows Speech Runtime Elevation of Privilege Vulnerability |
CVE-2021-28350 | High | 7.8 | 2021-04-13 | Windows GDI+ Remote Code Execution Vulnerability |
CVE-2021-28349 | High | 7.8 | 2021-04-13 | Windows GDI+ Remote Code Execution Vulnerability |
CVE-2021-28348 | High | 7.8 | 2021-04-13 | Windows GDI+ Remote Code Execution Vulnerability |
CVE-2021-28347 | High | 7.8 | 2021-04-13 | Windows Speech Runtime Elevation of Privilege Vulnerability |
CVE-2021-28346 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28345 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28344 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28343 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28342 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28341 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28340 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28339 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28338 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28337 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28336 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28335 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28334 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28333 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28332 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28331 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28330 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28329 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28328 | Medium | 6.5 | 2021-04-13 | Windows DNS Information Disclosure Vulnerability |
CVE-2021-28327 | High | 8.8 | 2021-04-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-28326 | Medium | 5.5 | 2021-04-13 | Windows AppX Deployment Server Denial of Service Vulnerability |
CVE-2021-28325 | Medium | 6.5 | 2021-04-13 | Windows SMB Information Disclosure Vulnerability |
CVE-2021-28324 | High | 7.5 | 2021-04-13 | Windows SMB Information Disclosure Vulnerability |
CVE-2021-28323 | Medium | 6.5 | 2021-04-13 | Windows DNS Information Disclosure Vulnerability |
CVE-2021-28322 | High | 7.8 | 2021-04-13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
CVE-2021-28321 | High | 7.8 | 2021-04-13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
CVE-2021-28320 | High | 7.8 | 2021-04-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2021-28319 | High | 7.5 | 2021-04-13 | Windows TCP/IP Driver Denial of Service Vulnerability |
CVE-2021-28318 | Medium | 5.5 | 2021-04-13 | Windows GDI+ Information Disclosure Vulnerability |
CVE-2021-28317 | Medium | 5.5 | 2021-04-13 | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
CVE-2021-28316 | Medium | 4.2 | 2021-04-13 | Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability |
CVE-2021-28315 | High | 7.8 | 2021-04-13 | Windows Media Video Decoder Remote Code Execution Vulnerability |
CVE-2021-28314 | High | 7.8 | 2021-04-13 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2021-28313 | High | 7.8 | 2021-04-13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
CVE-2021-28312 | Low | 3.3 | 2021-04-13 | Windows NTFS Denial of Service Vulnerability |
CVE-2021-28311 | Medium | 6.5 | 2021-04-13 | Windows Application Compatibility Cache Denial of Service Vulnerability |
CVE-2021-28310 | High | 7.8 | 2021-04-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-28309 | Medium | 5.5 | 2021-04-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2021-27096 | High | 7.8 | 2021-04-13 | NTFS Elevation of Privilege Vulnerability |
CVE-2021-27095 | High | 7.8 | 2021-04-13 | Windows Media Video Decoder Remote Code Execution Vulnerability |
CVE-2021-27094 | Medium | 4.4 | 2021-04-13 | Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability |
CVE-2021-27093 | Medium | 5.5 | 2021-04-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2021-27092 | Medium | 6.8 | 2021-04-13 | Azure AD Web Sign-in Security Feature Bypass Vulnerability |
CVE-2021-27091 | High | 7.8 | 2021-04-13 | RPC Endpoint Mapper Service Elevation of Privilege Vulnerability |
CVE-2021-27090 | High | 7.8 | 2021-04-13 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2021-27089 | High | 7.8 | 2021-04-13 | Microsoft Internet Messaging API Remote Code Execution Vulnerability |
CVE-2021-27088 | High | 7.8 | 2021-04-13 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-27086 | High | 7.8 | 2021-04-13 | Windows Services and Controller App Elevation of Privilege Vulnerability |
CVE-2021-27079 | Medium | 5.7 | 2021-04-13 | Windows Media Photo Codec Information Disclosure Vulnerability |
CVE-2021-27072 | High | 7.0 | 2021-04-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-27067 | Medium | 6.5 | 2021-04-13 | Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability |
CVE-2021-27064 | High | 7.8 | 2021-04-13 | Visual Studio Installer Elevation of Privilege Vulnerability |
CVE-2021-26417 | Medium | 5.5 | 2021-04-13 | Windows Overlay Filter Information Disclosure Vulnerability |
CVE-2021-26416 | High | 7.7 | 2021-04-13 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2021-26415 | High | 7.8 | 2021-04-13 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2021-26413 | Medium | 6.2 | 2021-04-13 | Windows Installer Spoofing Vulnerability |
CVE-2021-23372 | Medium | 4.4 | 2021-04-13 | All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leadi… |
CVE-2021-21399 | Critical | 9.1 | 2021-04-13 | Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic A… |
CVE-2021-27609 | Medium | 6.5 | 2021-04-13 | SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and… |
CVE-2021-27605 | Medium | 4.3 | 2021-04-13 | SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authenticated but unauthorized attacker to r… |
CVE-2021-27603 | Medium | 6.5 | 2021-04-13 | An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. A… |
CVE-2021-27602 | Critical | 9.9 | 2021-04-13 | SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to dr… |
CVE-2021-27601 | Medium | 5.4 | 2021-04-13 | SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicious file on the server. When a victim tr… |
CVE-2021-27600 | Medium | 5.4 | 2021-04-13 | SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and se… |
CVE-2021-27598 | Medium | 5.3 | 2021-04-13 | SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read some statistical data like product version… |
CVE-2021-23281 | Critical | 10.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the da… |
CVE-2021-23280 | High | 8.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to… |
CVE-2021-23279 | High | 8.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validati… |
CVE-2021-23278 | High | 8.7 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation… |
CVE-2021-23277 | High | 8.3 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax… |
CVE-2021-23276 | High | 7.1 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to explo… |
CVE-2021-22720 | High | 7.2 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-22719 | High | 8.8 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-22718 | High | 7.8 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-22717 | High | 8.8 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-22716 | High | 7.8 | 2021-04-13 | A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies… |
CVE-2021-21784 | High | 7.8 | 2021-04-13 | An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to… |
CVE-2021-21492 | Medium | 4.3 | 2021-04-13 | SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, r… |
CVE-2021-21485 | Medium | 6.5 | 2021-04-13 | An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attack… |
CVE-2021-21483 | Medium | 4.9 | 2021-04-13 | Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensitive information which has a direct serio… |
CVE-2021-21482 | High | 8.3 | 2021-04-13 | SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password u… |
CVE-2021-0471 | Medium | 5.5 | 2021-04-13 | In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no… |
CVE-2021-0468 | Medium | 6.6 | 2021-04-13 | In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has p… |
CVE-2021-0446 | High | 7.3 | 2021-04-13 | In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege wit… |
CVE-2021-0445 | High | 7.8 | 2021-04-13 | In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege with no addit… |
CVE-2021-0444 | Medium | 5.5 | 2021-04-13 | In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data… |
CVE-2021-0443 | Medium | 4.7 | 2021-04-13 | In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to l… |
CVE-2021-0442 | High | 7.8 | 2021-04-13 | In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead to local… |
CVE-2021-0439 | High | 7.8 | 2021-04-13 | In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This coul… |
CVE-2021-0438 | High | 7.8 | 2021-04-13 | In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCU… |
CVE-2021-0437 | High | 7.8 | 2021-04-13 | In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional… |
CVE-2021-0436 | Medium | 5.5 | 2021-04-13 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure w… |