2021 CVEs (page 22)
Page 22 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37936 | Medium | 5.4 | 2022-11-18 | It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write docu… |
CVE-2021-33621 | High | 8.8 | 2022-11-18 | The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untru… |
CVE-2021-31739 | Medium | 6.1 | 2022-11-18 | The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly encoded in HTML attributes when returned… |
CVE-2021-22141 | Medium | 6.1 | 2022-11-18 | An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana re… |
CVE-2021-36905 | Medium | 5.4 | 2022-11-17 | Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress. |
CVE-2021-31608 | Medium | 4.3 | 2022-11-17 | Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control. |
CVE-2021-33897 | Medium | 5.5 | 2022-11-17 | A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service (application cras… |
CVE-2021-38819 | High | 8.8 | 2022-11-17 | A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page. |
CVE-2021-4241 | Low | 2.6 | 2022-11-15 | A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php… |
CVE-2021-4240 | Low | 2.6 | 2022-11-15 | A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Servi… |
CVE-2021-40272 | Medium | 6.1 | 2022-11-14 | OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS). |
CVE-2021-38828 | Medium | 5.3 | 2022-11-14 | Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing. |
CVE-2021-38827 | High | 7.5 | 2022-11-14 | Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover. |
CVE-2021-33164 | High | 8.2 | 2022-11-11 | Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escalation of pr… |
CVE-2021-33159 | High | 7.4 | 2022-11-11 | Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged us… |
CVE-2021-33064 | Medium | 6.7 | 2022-11-11 | Uncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authenticated user to potentially enable escalatio… |
CVE-2021-26251 | Medium | 5.3 | 2022-11-11 | Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to potentially enable denial of service via netw… |
CVE-2021-0185 | High | 7.5 | 2022-11-10 | Improper input validation in the firmware for some Intel(R) Server Board M10JNP Family before version 7.216 may allow a privileged user to potentially enable a… |
CVE-2021-40289 | Medium | 6.1 | 2022-11-10 | mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS). |
CVE-2021-40226 | High | 7.5 | 2022-11-10 | xpdfreader 4.03 is vulnerable to Buffer Overflow. |
CVE-2021-46852 | High | 7.5 | 2022-11-09 | The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-46851 | Critical | 9.8 | 2022-11-09 | The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback. |
CVE-2021-26393 | Medium | 5.5 | 2022-11-09 | Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to genera… |
CVE-2021-26392 | High | 7.8 | 2022-11-09 | Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain cod… |
CVE-2021-26391 | High | 7.8 | 2022-11-09 | Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution i… |
CVE-2021-26360 | High | 7.8 | 2022-11-09 | An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential… |
CVE-2021-34579 | High | 7.5 | 2022-11-09 | In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows doe… |
CVE-2021-34577 | Medium | 6.5 | 2022-11-09 | In the Kaden PICOFLUX AiR water meter an adversary can read the values through wireless M-Bus mode 5 with a hardcoded shared key while being adjacent to the de… |
CVE-2021-34569 | Critical | 9.8 | 2022-11-09 | In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write me… |
CVE-2021-34568 | High | 7.5 | 2022-11-09 | In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denia… |
CVE-2021-34567 | High | 8.2 | 2022-11-09 | In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denia… |
CVE-2021-34566 | Critical | 9.1 | 2022-11-09 | In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the ioche… |
CVE-2021-39661 | High | 7.8 | 2022-11-08 | In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to lo… |
CVE-2021-1050 | High | 7.8 | 2022-11-08 | In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2021-40303 | Medium | 5.4 | 2022-11-08 | perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile. |
CVE-2021-42205 | Medium | 4.7 | 2022-11-07 | ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by send… |
CVE-2021-39473 | Medium | 5.4 | 2022-11-04 | Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting (XSS) due to improper sanitization of comment and contact fields. |
CVE-2021-39432 | Medium | 6.5 | 2022-11-04 | diplib v3.0.0 is vulnerable to Double Free. |
CVE-2021-34055 | High | 7.8 | 2022-11-04 | jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u. |
CVE-2021-44862 | High | 8.4 | 2022-11-03 | Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be re… |
CVE-2021-39077 | Medium | 4.4 | 2022-11-03 | IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IB… |
CVE-2021-36906 | Low | 2.7 | 2022-11-03 | Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress. |
CVE-2021-37823 | Medium | 4.9 | 2022-11-03 | OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background. |
CVE-2021-46853 | Medium | 5.9 | 2022-11-03 | Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS. |
CVE-2021-45448 | High | 7.1 | 2022-11-02 | Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 using the Pentaho Analyzer plugin exposes a service endpoint for templates which allow… |
CVE-2021-45447 | High | 7.7 | 2022-11-02 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 with the Data Lineage feature enabled transmits database pass… |
CVE-2021-45446 | Medium | 5.0 | 2022-11-02 | A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the childr… |
CVE-2021-37789 | High | 8.1 | 2022-11-02 | stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service. |
CVE-2021-27784 | Medium | 5.9 | 2022-10-31 | The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace… |
CVE-2021-40241 | Critical | 9.8 | 2022-10-31 | xfig 3.2.7 is vulnerable to Buffer Overflow. |
CVE-2021-40661 | High | 7.5 | 2022-10-31 | A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing Terminals Build 8.0.07 Ma… |
CVE-2021-42777 | Critical | 9.8 | 2022-10-29 | Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a… |
CVE-2021-36898 | High | 7.5 | 2022-10-28 | Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress. |
CVE-2021-36864 | Low | 3.4 | 2022-10-28 | Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress. |
CVE-2021-38733 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php. |
CVE-2021-38732 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php. |
CVE-2021-38731 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php. |
CVE-2021-38730 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php. |
CVE-2021-38729 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php. |
CVE-2021-38728 | Medium | 6.1 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php. |
CVE-2021-38217 | Critical | 9.8 | 2022-10-28 | SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php. |
CVE-2021-36863 | Medium | 5.4 | 2022-10-28 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress. |
CVE-2021-36858 | Medium | 4.8 | 2022-10-28 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress. |
CVE-2021-38737 | Critical | 9.8 | 2022-10-28 | SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php. |
CVE-2021-38736 | Critical | 9.8 | 2022-10-28 | SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php. |
CVE-2021-38734 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php. |
CVE-2021-37782 | Critical | 9.8 | 2022-10-28 | Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php. |
CVE-2021-37781 | Medium | 5.4 | 2022-10-28 | Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php. |
CVE-2021-35388 | Medium | 5.4 | 2022-10-28 | Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php. |
CVE-2021-35387 | High | 8.8 | 2022-10-28 | Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php. |
CVE-2021-38399 | High | 7.5 | 2022-10-28 | Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized fil… |
CVE-2021-38397 | Critical | 10.0 | 2022-10-28 | Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbi… |
CVE-2021-38395 | Critical | 9.1 | 2022-10-28 | Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attac… |
CVE-2021-36206 | Critical | 10.0 | 2022-10-28 | All versions of CEVAS prior to 1.01.46 do not sufficiently validate user-controllable input and could allow a user to bypass authentication and retrieve data w… |
CVE-2021-45476 | Medium | 4.7 | 2022-10-27 | Yordam Library Information Document Automation product before version 19.02 has an unauthenticated reflected XSS vulnerability. |
CVE-2021-45475 | Medium | 5.3 | 2022-10-27 | Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosure vulnerability. |
CVE-2021-4228 | Medium | 5.8 | 2022-10-24 | Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connection. This… |
CVE-2021-46850 | High | 7.2 | 2022-10-24 | myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrativ… |
CVE-2021-46848 | Critical | 9.1 | 2022-10-24 | GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. |
CVE-2021-46279 | Medium | 5.8 | 2022-10-24 | Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: L… |
CVE-2021-45925 | Medium | 5.3 | 2022-10-24 | Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST250… |
CVE-2021-44776 | Medium | 6.5 | 2022-10-24 | A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbitrarily change the security access right… |
CVE-2021-44769 | Medium | 4.9 | 2022-10-24 | An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service (DoS) condition which can… |
CVE-2021-44467 | Medium | 5.3 | 2022-10-24 | A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrarily terminate active sessions of other u… |
CVE-2021-42010 | Critical | 9.8 | 2022-10-24 | Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating… |
CVE-2021-26733 | Medium | 5.3 | 2022-10-24 | A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the… |
CVE-2021-26732 | Medium | 6.5 | 2022-10-24 | A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration… |
CVE-2021-26731 | Critical | 9.1 | 2022-10-24 | Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticated attacker… |
CVE-2021-26730 | Critical | 10.0 | 2022-10-24 | A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code… |
CVE-2021-26729 | Critical | 10.0 | 2022-10-24 | Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute… |
CVE-2021-26728 | Critical | 10.0 | 2022-10-24 | Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary cod… |
CVE-2021-26727 | Critical | 10.0 | 2022-10-24 | Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execut… |
CVE-2021-42553 | Medium | 6.8 | 2022-10-21 | A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descr… |
CVE-2021-33231 | Medium | 5.4 | 2022-10-20 | Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the… |
CVE-2021-3305 | High | 7.8 | 2022-10-18 | Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability. |
CVE-2021-27406 | High | 8.8 | 2022-10-14 | An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host ma… |
CVE-2021-22685 | Medium | 6.2 | 2022-10-14 | An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1. |
CVE-2021-0699 | High | 7.8 | 2022-10-14 | In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with… |
CVE-2021-46840 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicio… |
CVE-2021-46839 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of… |