2021 CVEs (page 197)
Page 197 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-30141 | High | 7.5 | 2021-04-05 | Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to… |
CVE-2021-20308 | Critical | 9.8 | 2021-04-05 | Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181. |
CVE-2021-20307 | Critical | 9.8 | 2021-04-05 | Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values. |
CVE-2021-20305 | High | 8.1 | 2021-04-05 | A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Cur… |
CVE-2021-24212 | Critical | 9.8 | 2021-04-05 | The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) allows unauthenticated users to upload any… |
CVE-2021-24211 | Medium | 5.4 | 2021-04-05 | The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploi… |
CVE-2021-24210 | Medium | 6.1 | 2021-04-05 | There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redir… |
CVE-2021-24209 | High | 7.2 | 2021-04-05 | The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $c… |
CVE-2021-24208 | Medium | 5.4 | 2021-04-05 | The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via t… |
CVE-2021-24207 | Medium | 4.3 | 2021-04-05 | By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles mu… |
CVE-2021-24206 | Medium | 5.4 | 2021-04-05 | In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php) accepts a ‘title_size’ parameter. Althoug… |
CVE-2021-24205 | Medium | 5.4 | 2021-04-05 | In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget (includes/widgets/icon-box.php) accepts a ‘title_size’ parameter. Although… |
CVE-2021-24204 | Medium | 5.4 | 2021-04-05 | In the Elementor Website Builder WordPress plugin before 3.1.4, the accordion widget (includes/widgets/accordion.php) accepts a ‘title_html_tag’ parameter. Alt… |
CVE-2021-24203 | Medium | 5.4 | 2021-04-05 | In the Elementor Website Builder WordPress plugin before 3.1.4, the divider widget (includes/widgets/divider.php) accepts an ‘html_tag’ parameter. Although the… |
CVE-2021-24202 | Medium | 5.4 | 2021-04-05 | In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php) accepts a ‘header_size’ parameter. Although t… |
CVE-2021-24201 | Medium | 5.4 | 2021-04-05 | In the Elementor Website Builder WordPress plugin before 3.1.4, the column element (includes/elements/column.php) accepts an ‘html_tag’ parameter. Although the… |
CVE-2021-24196 | Medium | 5.4 | 2021-04-05 | The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be co… |
CVE-2021-24187 | Medium | 5.4 | 2021-04-05 | The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to reflected Cross-Site Scripting (XSS) as user… |
CVE-2021-24186 | Medium | 6.5 | 2021-04-05 | The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vu… |
CVE-2021-24185 | Medium | 6.5 | 2021-04-05 | The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time bas… |
CVE-2021-24184 | High | 8.8 | 2021-04-05 | Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify cour… |
CVE-2021-24183 | Medium | 6.5 | 2021-04-05 | The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to… |
CVE-2021-24182 | Medium | 6.5 | 2021-04-05 | The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerab… |
CVE-2021-24181 | Medium | 6.5 | 2021-04-05 | The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind an… |
CVE-2021-24180 | Medium | 5.4 | 2021-04-05 | Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnera… |
CVE-2021-24177 | Medium | 5.4 | 2021-04-05 | In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manage… |
CVE-2021-24176 | Medium | 5.4 | 2021-04-05 | The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to execut… |
CVE-2021-24175 | Critical | 9.8 | 2021-04-05 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing… |
CVE-2021-24174 | High | 8.1 | 2021-04-05 | The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate… |
CVE-2021-24173 | Medium | 6.1 | 2021-04-05 | The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin'… |
CVE-2021-24172 | Medium | 4.3 | 2021-04-05 | The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups o… |
CVE-2021-24171 | Critical | 9.8 | 2021-04-05 | The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass t… |
CVE-2021-24170 | High | 7.5 | 2021-04-05 | The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to… |
CVE-2021-24169 | Medium | 6.1 | 2021-04-05 | This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Pane… |
CVE-2021-24168 | Medium | 5.4 | 2021-04-05 | The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields (such as Email Subject, Email Recipient, etc) when creating… |
CVE-2021-24167 | High | 7.5 | 2021-04-05 | When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send an XMLHttpRequest request to https://wt… |
CVE-2021-24166 | Medium | 5.4 | 2021-04-05 | The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce pr… |
CVE-2021-24165 | Medium | 6.1 | 2021-04-05 | In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was vulnerable to open redirect due to the use of a us… |
CVE-2021-24164 | Medium | 4.3 | 2021-04-05 | In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wp_ajax_nf_oauth, and… |
CVE-2021-24163 | High | 8.8 | 2021-04-05 | The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it have any nonce protection, therefore maki… |
CVE-2021-24162 | High | 8.8 | 2021-04-05 | In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings… |
CVE-2021-24161 | High | 8.8 | 2021-04-05 | In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive co… |
CVE-2021-24160 | High | 8.8 | 2021-04-05 | In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extrac… |
CVE-2021-24159 | High | 8.8 | 2021-04-05 | Due to the lack of sanitization and lack of nonce protection on the custom CSS feature, an attacker could craft a request to inject malicious JavaScript on a s… |
CVE-2021-24158 | Medium | 6.5 | 2021-04-05 | Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registrati… |
CVE-2021-24157 | Medium | 5.4 | 2021-04-05 | Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post. There were no checks to verify that a user had the unfil… |
CVE-2021-24156 | Medium | 5.4 | 2021-04-05 | Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML w… |
CVE-2021-24155 | High | 7.2 | 2021-04-05 | The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extensio… |
CVE-2021-24154 | Medium | 4.9 | 2021-04-05 | The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators… |
CVE-2021-24153 | Medium | 5.4 | 2021-04-05 | A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blac… |
CVE-2021-24152 | Medium | 6.1 | 2021-04-05 | The "All Subscribers" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting. |
CVE-2021-24150 | High | 7.5 | 2021-04-05 | The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF… |
CVE-2021-30109 | Medium | 6.1 | 2021-04-05 | Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS)… |
CVE-2021-30058 | Medium | 6.1 | 2021-04-05 | Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/… |
CVE-2021-30057 | Medium | 4.8 | 2021-04-05 | A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" v… |
CVE-2021-30056 | Medium | 5.4 | 2021-04-05 | Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via th… |
CVE-2021-30055 | High | 8.8 | 2021-04-05 | A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when run… |
CVE-2021-29996 | Critical | 9.6 | 2021-04-05 | Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutatio… |
CVE-2021-29261 | High | 7.8 | 2021-04-05 | The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration. |
CVE-2021-28832 | High | 7.8 | 2021-04-05 | VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration. |
CVE-2021-30127 | High | 7.3 | 2021-04-03 | TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsiste… |
CVE-2021-21533 | Medium | 4.3 | 2021-04-02 | Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in the job status retrie… |
CVE-2021-21532 | Medium | 5.0 | 2021-04-02 | Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a clie… |
CVE-2021-21529 | Low | 3.8 | 2021-04-02 | Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may poten… |
CVE-2021-30074 | Medium | 6.1 | 2021-04-02 | docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character. |
CVE-2021-30126 | Medium | 6.5 | 2021-04-02 | Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to access application set… |
CVE-2021-30125 | Medium | 6.1 | 2021-04-02 | Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376. |
CVE-2021-30072 | Critical | 9.8 | 2021-04-02 | An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require… |
CVE-2021-28941 | Medium | 5.3 | 2021-04-02 | Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpie_debug.php or… |
CVE-2021-28940 | Critical | 9.8 | 2021-04-02 | Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary… |
CVE-2021-3374 | Medium | 5.3 | 2021-04-02 | Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash. |
CVE-2021-29661 | Medium | 5.4 | 2021-04-02 | Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript payload in… |
CVE-2021-29660 | High | 8.8 | 2021-04-02 | A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administra… |
CVE-2021-27973 | High | 7.2 | 2021-04-02 | SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages. |
CVE-2021-1879 | Medium | 6.1 | 2021-04-02 | This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing… |
CVE-2021-1871 | Critical | 9.8 | 2021-04-02 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001… |
CVE-2021-1870 | Critical | 9.8 | 2021-04-02 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001… |
CVE-2021-1844 | High | 8.8 | 2021-04-02 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 1561… |
CVE-2021-1818 | Critical | 9.8 | 2021-04-02 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-… |
CVE-2021-1806 | High | 7.0 | 2021-04-02 | A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojav… |
CVE-2021-1805 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, m… |
CVE-2021-1803 | Low | 3.3 | 2021-04-02 | The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local application may be able to enumerate the user's i… |
CVE-2021-1802 | High | 7.8 | 2021-04-02 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-… |
CVE-2021-1801 | Medium | 6.5 | 2021-04-02 | This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Updat… |
CVE-2021-1800 | Medium | 5.5 | 2021-04-02 | A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files… |
CVE-2021-1799 | Medium | 6.5 | 2021-04-02 | A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security… |
CVE-2021-1797 | Medium | 5.5 | 2021-04-02 | The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001… |
CVE-2021-1796 | Critical | 9.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause ar… |
CVE-2021-1795 | Critical | 9.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause ar… |
CVE-2021-1794 | Critical | 9.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arb… |
CVE-2021-1793 | High | 7.8 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, w… |
CVE-2021-1790 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Upda… |
CVE-2021-1761 | High | 7.5 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, w… |
CVE-2021-1753 | High | 7.8 | 2021-04-02 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Updat… |
CVE-2021-22865 | Medium | 6.5 | 2021-04-02 | An improper access control vulnerability was identified in GitHub Enterprise Server that allowed access tokens generated from a GitHub App's web authentication… |
CVE-2021-1792 | High | 8.8 | 2021-04-02 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Updat… |
CVE-2021-1791 | Medium | 5.5 | 2021-04-02 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macO… |
CVE-2021-1789 | High | 8.8 | 2021-04-02 | A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Updat… |
CVE-2021-1788 | High | 8.8 | 2021-04-02 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Up… |
CVE-2021-1787 | High | 7.8 | 2021-04-02 | Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Moja… |