2021 CVEs (page 212)
Page 212 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-1227 | High | 8.1 | 2021-02-24 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) at… |
CVE-2021-22667 | Critical | 9.8 | 2021-02-24 | BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access a… |
CVE-2021-21974 | High | 8.8 | 2021-02-24 | OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A… |
CVE-2021-21973 | Medium | 5.3 | 2021-02-24 | The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malici… |
CVE-2021-21972 | Critical | 9.8 | 2021-02-24 | The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exp… |
CVE-2021-21622 | Medium | 5.4 | 2021-02-24 | Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XS… |
CVE-2021-21621 | Medium | 5.3 | 2021-02-24 | Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication details only)" inform… |
CVE-2021-21620 | Medium | 4.3 | 2021-02-24 | A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims. |
CVE-2021-21619 | Medium | 5.4 | 2021-02-24 | Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by at… |
CVE-2021-21618 | Medium | 5.4 | 2021-02-24 | Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site script… |
CVE-2021-21617 | High | 8.8 | 2021-02-24 | A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurat… |
CVE-2021-21616 | Medium | 4.6 | 2021-02-24 | Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability expl… |
CVE-2021-3355 | Medium | 5.4 | 2021-02-24 | A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords. |
CVE-2021-27645 | Low | 2.5 | 2021-02-24 | The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due… |
CVE-2021-20662 | High | 7.5 | 2021-02-24 | Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the… |
CVE-2021-20661 | High | 8.1 | 2021-02-24 | Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directorie… |
CVE-2021-20660 | Medium | 6.1 | 2021-02-24 | Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors. |
CVE-2021-20659 | High | 8.8 | 2021-02-24 | SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script… |
CVE-2021-20658 | Critical | 9.8 | 2021-02-24 | SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors. |
CVE-2021-20657 | Medium | 5.4 | 2021-02-24 | Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or alter the setting in… |
CVE-2021-20656 | Medium | 4.3 | 2021-02-24 | Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information… |
CVE-2021-3410 | High | 7.8 | 2021-02-23 | A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary cod… |
CVE-2021-3407 | Medium | 5.5 | 2021-02-23 | A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences. |
CVE-2021-21323 | Medium | 4.3 | 2021-02-23 | Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17… |
CVE-2021-20256 | Medium | 5.3 | 2021-02-23 | A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. Th… |
CVE-2021-20252 | Medium | 6.5 | 2021-02-23 | A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges in certain… |
CVE-2021-20194 | High | 7.8 | 2021-02-23 | There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROU… |
CVE-2021-20182 | High | 8.8 | 2021-02-23 | A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of r… |
CVE-2021-3405 | Medium | 6.5 | 2021-02-23 | A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml. |
CVE-2021-26927 | Medium | 5.5 | 2021-02-23 | A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service. |
CVE-2021-27583 | Medium | 5.3 | 2021-02-23 | In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability… |
CVE-2021-26680 | High | 7.2 | 2021-02-23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vu… |
CVE-2021-26679 | High | 7.2 | 2021-02-23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vu… |
CVE-2021-26677 | High | 7.8 | 2021-02-23 | A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1… |
CVE-2021-26595 | Medium | 5.3 | 2021-02-23 | In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of th… |
CVE-2021-26594 | High | 8.8 | 2021-02-23 | In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerab… |
CVE-2021-26593 | High | 7.5 | 2021-02-23 | In Directus 8.x through 8.8.1, an attacker can see all users in the CMS using the API /users/{id}. For each call, they get in response a lot of information abo… |
CVE-2021-22882 | High | 7.5 | 2021-02-23 | UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to cra… |
CVE-2021-22112 | High | 8.8 | 2021-02-23 | Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityC… |
CVE-2021-20247 | High | 7.4 | 2021-02-23 | A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromis… |
CVE-2021-27582 | Critical | 9.1 | 2021-02-23 | org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment… |
CVE-2021-27579 | High | 7.8 | 2021-02-23 | Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A… |
CVE-2021-26926 | High | 7.1 | 2021-02-23 | A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program cr… |
CVE-2021-26686 | Medium | 6.5 | 2021-02-23 | A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulne… |
CVE-2021-26684 | High | 7.2 | 2021-02-23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vu… |
CVE-2021-26683 | High | 7.2 | 2021-02-23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vu… |
CVE-2021-26682 | Medium | 6.1 | 2021-02-23 | A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1… |
CVE-2021-26681 | High | 7.2 | 2021-02-23 | A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vu… |
CVE-2021-26678 | Medium | 6.1 | 2021-02-23 | A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1… |
CVE-2021-22651 | High | 7.8 | 2021-02-23 | When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve… |
CVE-2021-20229 | Medium | 4.3 | 2021-02-23 | A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all c… |
CVE-2021-20220 | Medium | 4.8 | 2021-02-23 | A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1… |
CVE-2021-20198 | High | 8.1 | 2021-02-23 | A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 c… |
CVE-2021-26685 | Medium | 6.5 | 2021-02-23 | A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulne… |
CVE-2021-22113 | Medium | 5.3 | 2021-02-23 | Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Hea… |
CVE-2021-20230 | High | 7.5 | 2021-02-23 | A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options… |
CVE-2021-20226 | High | 7.8 | 2021-02-23 | A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the sy… |
CVE-2021-25630 | High | 7.8 | 2021-02-23 | "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it… |
CVE-2021-3252 | High | 7.5 | 2021-02-23 | KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server durin… |
CVE-2021-27550 | Medium | 5.5 | 2021-02-23 | Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the… |
CVE-2021-22649 | High | 7.8 | 2021-02-23 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR… |
CVE-2021-22647 | High | 7.8 | 2021-02-23 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR… |
CVE-2021-22645 | High | 7.8 | 2021-02-23 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR… |
CVE-2021-22643 | High | 7.8 | 2021-02-23 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR… |
CVE-2021-27568 | Medium | 5.9 | 2021-02-23 | An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught… |
CVE-2021-27189 | Medium | 5.9 | 2021-02-23 | The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation. |
CVE-2021-23827 | Medium | 5.5 | 2021-02-23 | Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private… |
CVE-2021-21157 | High | 8.8 | 2021-02-22 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2021-21156 | High | 8.8 | 2021-02-22 | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script. |
CVE-2021-21155 | Critical | 9.6 | 2021-02-22 | Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to pote… |
CVE-2021-21154 | Critical | 9.6 | 2021-02-22 | Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially per… |
CVE-2021-21153 | High | 8.8 | 2021-02-22 | Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory acc… |
CVE-2021-21152 | High | 8.8 | 2021-02-22 | Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2021-21151 | Critical | 9.6 | 2021-02-22 | Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2021-21150 | Critical | 9.6 | 2021-02-22 | Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentiall… |
CVE-2021-21149 | High | 8.8 | 2021-02-22 | Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a… |
CVE-2021-26725 | High | 7.2 | 2021-02-22 | Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected syst… |
CVE-2021-26724 | High | 7.2 | 2021-02-22 | OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrator… |
CVE-2021-26068 | High | 8.8 | 2021-02-22 | An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers to execute arbitrary code via a template… |
CVE-2021-27279 | Medium | 5.4 | 2021-02-22 | MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode). |
CVE-2021-27564 | Medium | 5.4 | 2021-02-22 | A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored… |
CVE-2021-27549 | Medium | 5.3 | 2021-02-22 | Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended be… |
CVE-2021-27228 | Critical | 9.8 | 2021-02-22 | An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are held in an internal JS Object. Therefo… |
CVE-2021-3120 | Critical | 9.8 | 2021-02-22 | An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote c… |
CVE-2021-27559 | Medium | 5.4 | 2021-02-22 | The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field. |
CVE-2021-27371 | Medium | 5.4 | 2021-02-22 | The Contact page in Monica 2.19.1 allows stored XSS via the Description field. |
CVE-2021-27370 | Medium | 5.4 | 2021-02-22 | The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field. |
CVE-2021-27369 | Medium | 5.4 | 2021-02-22 | The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field. |
CVE-2021-27368 | Medium | 5.4 | 2021-02-22 | The Contact page in Monica 2.19.1 allows stored XSS via the First Name field. |
CVE-2021-3149 | High | 7.2 | 2021-02-22 | On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authentication by the attacker) because the s… |
CVE-2021-26120 | Critical | 9.8 | 2021-02-22 | Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring. |
CVE-2021-26119 | High | 7.5 | 2021-02-22 | Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode. |
CVE-2021-24115 | Critical | 9.8 | 2021-02-22 | In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex). |
CVE-2021-27516 | High | 7.5 | 2021-02-22 | URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. |
CVE-2021-27515 | Medium | 5.3 | 2021-02-22 | url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. |
CVE-2021-27514 | Critical | 9.8 | 2021-02-22 | EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in… |
CVE-2021-27513 | High | 8.8 | 2021-02-22 | The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside." |
CVE-2021-26716 | Medium | 6.1 | 2021-02-21 | Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter. |
CVE-2021-26544 | Medium | 5.4 | 2021-02-20 | Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access l… |
CVE-2021-3189 | Medium | 6.1 | 2021-02-19 | The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring. |