2021 CVEs (page 218)
Page 218 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25237 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about the managing port us… |
CVE-2021-25236 | Medium | 5.3 | 2021-02-04 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allo… |
CVE-2021-25235 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25234 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25233 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25232 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25231 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25230 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25229 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain informa… |
CVE-2021-25228 | Medium | 5.3 | 2021-02-04 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow a… |
CVE-2021-25227 | Low | 3.3 | 2021-02-04 | Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality wi… |
CVE-2021-0351 | High | 7.5 | 2021-02-04 | In wlan driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privil… |
CVE-2021-0350 | Medium | 4.4 | 2021-02-04 | In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges neede… |
CVE-2021-0349 | Medium | 6.7 | 2021-02-04 | In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0348 | Medium | 6.7 | 2021-02-04 | In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-0347 | Medium | 4.4 | 2021-02-04 | In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2021-0346 | Medium | 6.7 | 2021-02-04 | In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0345 | Medium | 6.7 | 2021-02-04 | In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System exe… |
CVE-2021-0344 | Medium | 6.7 | 2021-02-04 | In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0343 | Medium | 6.7 | 2021-02-04 | In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-1389 | Medium | 5.8 | 2021-02-04 | A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices could allow an unauthenticated, remo… |
CVE-2021-1370 | High | 7.8 | 2021-02-04 | A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L s… |
CVE-2021-1354 | Medium | 4.3 | 2021-02-04 | A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacke… |
CVE-2021-1348 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1347 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1346 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1345 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1344 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1343 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1342 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1341 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1340 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1339 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1338 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1337 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1336 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1335 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1334 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1333 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1332 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1331 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1330 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1329 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1328 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1327 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1326 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1325 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1324 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1323 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1322 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1321 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1320 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1319 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1318 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1317 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1316 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1315 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1314 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1313 | High | 8.6 | 2021-02-04 | Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial o… |
CVE-2021-1297 | High | 7.5 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1296 | High | 7.5 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1295 | Critical | 9.8 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1294 | Critical | 9.8 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1293 | Critical | 9.8 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1292 | Critical | 9.8 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1291 | Critical | 9.8 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1290 | Critical | 9.8 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1289 | Critical | 9.8 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unau… |
CVE-2021-1288 | High | 8.6 | 2021-02-04 | Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial o… |
CVE-2021-1268 | High | 7.4 | 2021-02-04 | A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause… |
CVE-2021-1266 | Medium | 4.3 | 2021-02-04 | A vulnerability in the REST API of Cisco Managed Services Accelerator (MSX) could allow an authenticated, remote attacker to cause a denial of service (DoS) co… |
CVE-2021-1244 | Medium | 6.7 | 2021-02-04 | Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR… |
CVE-2021-1243 | Medium | 5.3 | 2021-02-04 | A vulnerability in the Local Packet Transport Services (LPTS) programming of the SNMP with the management plane protection feature of Cisco IOS XR Software cou… |
CVE-2021-1221 | Medium | 4.1 | 2021-02-04 | A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject… |
CVE-2021-1136 | Medium | 6.7 | 2021-02-04 | Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR… |
CVE-2021-1128 | Medium | 5.5 | 2021-02-04 | A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow. T… |
CVE-2021-26689 | Critical | 9.8 | 2021-02-04 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LVE-SMP-2000… |
CVE-2021-26688 | Critical | 9.8 | 2021-02-04 | An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 (… |
CVE-2021-26687 | Critical | 9.8 | 2021-02-04 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishand… |
CVE-2021-20016 | Critical | 9.8 | 2021-02-04 | A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password… |
CVE-2021-3401 | Critical | 9.8 | 2021-02-04 | Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to… |
CVE-2021-26024 | Medium | 5.3 | 2021-02-03 | The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other us… |
CVE-2021-26023 | Medium | 6.1 | 2021-02-03 | The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS. |
CVE-2021-23331 | Medium | 4.4 | 2021-02-03 | This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r… |
CVE-2021-25276 | High | 7.1 | 2021-02-03 | In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files (that include users' password hashes) that is world readable an… |
CVE-2021-25275 | High | 7.8 | 2021-02-03 | SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to a… |
CVE-2021-25274 | Critical | 9.8 | 2021-02-03 | The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a… |
CVE-2021-25778 | Medium | 5.3 | 2021-02-03 | In JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly. |
CVE-2021-25777 | Medium | 5.3 | 2021-02-03 | In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly. |
CVE-2021-25776 | High | 7.5 | 2021-02-03 | In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters. |
CVE-2021-25775 | Low | 3.8 | 2021-02-03 | In JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for any other users. |
CVE-2021-25774 | Medium | 4.3 | 2021-02-03 | In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user. |
CVE-2021-25773 | Medium | 6.1 | 2021-02-03 | JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages. |
CVE-2021-25772 | Medium | 5.3 | 2021-02-03 | In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration. |
CVE-2021-25771 | Medium | 4.3 | 2021-02-03 | In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed. |
CVE-2021-25770 | Critical | 9.8 | 2021-02-03 | In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution. |
CVE-2021-25769 | High | 7.5 | 2021-02-03 | In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments. |
CVE-2021-25768 | Medium | 5.3 | 2021-02-03 | In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly. |
CVE-2021-25767 | Medium | 5.3 | 2021-02-03 | In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution. |
CVE-2021-25766 | Medium | 5.3 | 2021-02-03 | In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. |