2021 CVEs (page 220)
Page 220 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20620 | Medium | 6.1 | 2021-01-28 | Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. |
CVE-2021-26067 | Medium | 5.3 | 2021-01-28 | Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk an… |
CVE-2021-3331 | Critical | 9.8 | 2021-01-27 | WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For exa… |
CVE-2021-3326 | High | 7.5 | 2021-01-27 | The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an… |
CVE-2021-26276 | Medium | 5.3 | 2021-01-27 | scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendo… |
CVE-2021-22655 | High | 7.8 | 2021-01-27 | Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project fil… |
CVE-2021-22653 | High | 7.8 | 2021-01-27 | Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project fi… |
CVE-2021-22641 | High | 7.8 | 2021-01-27 | A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file… |
CVE-2021-22639 | High | 7.8 | 2021-01-27 | An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file tha… |
CVE-2021-22637 | High | 7.8 | 2021-01-27 | Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special pr… |
CVE-2021-3325 | Critical | 9.8 | 2021-01-27 | Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). This iss… |
CVE-2021-26118 | High | 7.5 | 2021-01-27 | While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed p… |
CVE-2021-26117 | High | 7.5 | 2021-01-27 | The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to versio… |
CVE-2021-25247 | High | 7.8 | 2021-01-27 | A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate pri… |
CVE-2021-25226 | Medium | 5.5 | 2021-01-27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-se… |
CVE-2021-25225 | Medium | 5.5 | 2021-01-27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-se… |
CVE-2021-25224 | Medium | 5.5 | 2021-01-27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-se… |
CVE-2021-3318 | Medium | 6.1 | 2021-01-27 | attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter. |
CVE-2021-20357 | Medium | 5.4 | 2021-01-27 | IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alter… |
CVE-2021-25312 | High | 8.8 | 2021-01-27 | HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method. |
CVE-2021-25311 | Critical | 9.9 | 2021-01-27 | condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file unde… |
CVE-2021-3272 | Medium | 5.5 | 2021-01-27 | jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channel… |
CVE-2021-3317 | High | 8.8 | 2021-01-26 | KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter. |
CVE-2021-3165 | High | 8.8 | 2021-01-26 | SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI. |
CVE-2021-1071 | Medium | 5.6 | 2021-01-26 | NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in th… |
CVE-2021-1070 | High | 7.1 | 2021-01-26 | NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh s… |
CVE-2021-3309 | High | 8.1 | 2021-01-26 | packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store, |
CVE-2021-3156 | High | 7.8 | 2021-01-26 | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" a… |
CVE-2021-26272 | Medium | 6.5 | 2021-01-26 | It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then pr… |
CVE-2021-26271 | Medium | 6.5 | 2021-01-26 | It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dia… |
CVE-2021-21283 | Medium | 5.4 | 2021-01-26 | Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vu… |
CVE-2021-21278 | High | 8.6 | 2021-01-26 | RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code in… |
CVE-2021-21271 | Medium | 6.5 | 2021-01-26 | Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and s… |
CVE-2021-3308 | Medium | 5.5 | 2021-01-26 | An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all… |
CVE-2021-22159 | High | 7.8 | 2021-01-26 | Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveIT) Agent for Window… |
CVE-2021-23272 | Medium | 4.6 | 2021-01-26 | The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric conta… |
CVE-2021-3304 | Critical | 9.8 | 2021-01-26 | Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI. |
CVE-2021-3297 | High | 7.8 | 2021-01-26 | On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access. |
CVE-2021-3291 | High | 7.2 | 2021-01-26 | Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command. |
CVE-2021-3286 | Critical | 9.8 | 2021-01-26 | SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: th… |
CVE-2021-3285 | Medium | 5.3 | 2021-01-26 | jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS. |
CVE-2021-3278 | Critical | 9.8 | 2021-01-26 | Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker… |
CVE-2021-3223 | High | 7.5 | 2021-01-26 | Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files. |
CVE-2021-3199 | Critical | 9.8 | 2021-01-26 | Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an imag… |
CVE-2021-3195 | High | 7.5 | 2021-01-26 | bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOT… |
CVE-2021-3193 | Critical | 9.8 | 2021-01-26 | Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to… |
CVE-2021-3190 | Critical | 9.8 | 2021-01-26 | The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. |
CVE-2021-3188 | Critical | 9.8 | 2021-01-26 | phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports. |
CVE-2021-3186 | Medium | 5.4 | 2021-01-26 | A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject… |
CVE-2021-3185 | Critical | 9.8 | 2021-01-26 | A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be sm… |
CVE-2021-3164 | High | 8.8 | 2021-01-26 | ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an… |
CVE-2021-3152 | Medium | 5.3 | 2021-01-26 | Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations. NOTE: the ven… |
CVE-2021-3115 | High | 7.5 | 2021-01-26 | Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch mod… |
CVE-2021-3114 | Medium | 6.5 | 2021-01-26 | In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the fi… |
CVE-2021-26267 | High | 7.5 | 2021-01-26 | cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579). |
CVE-2021-26266 | High | 7.5 | 2021-01-26 | cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578). |
CVE-2021-26026 | High | 7.8 | 2021-01-26 | PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!JPEGTransW+0x000000000000c7f4 via a… |
CVE-2021-26025 | High | 7.8 | 2021-01-26 | PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!zlibVersion+0x0000000000004e5e via a… |
CVE-2021-25908 | High | 7.5 | 2021-01-26 | An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free. |
CVE-2021-25907 | Critical | 9.8 | 2021-01-26 | An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed. |
CVE-2021-25906 | High | 7.5 | 2021-01-26 | An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed. |
CVE-2021-25905 | Critical | 9.1 | 2021-01-26 | An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory. |
CVE-2021-25904 | High | 7.5 | 2021-01-26 | An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes… |
CVE-2021-25903 | High | 7.5 | 2021-01-26 | An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced. |
CVE-2021-25902 | High | 7.5 | 2021-01-26 | An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a double drop. |
CVE-2021-25901 | Medium | 5.3 | 2021-01-26 | An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race. |
CVE-2021-25900 | Critical | 9.8 | 2021-01-26 | An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many. |
CVE-2021-25864 | High | 7.5 | 2021-01-26 | node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary f… |
CVE-2021-25863 | High | 8.8 | 2021-01-26 | Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account. |
CVE-2021-22873 | Medium | 6.1 | 2021-01-26 | Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such… |
CVE-2021-22872 | Medium | 6.1 | 2021-01-26 | Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php delivery script. While t… |
CVE-2021-22871 | Medium | 4.8 | 2021-01-26 | Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed u… |
CVE-2021-22698 | High | 7.8 | 2021-01-26 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that coul… |
CVE-2021-22697 | High | 7.8 | 2021-01-26 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that coul… |
CVE-2021-21723 | High | 7.5 | 2021-01-26 | Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulner… |
CVE-2021-21615 | Medium | 5.3 | 2021-01-26 | Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use… |
CVE-2021-21275 | Medium | 5.3 | 2021-01-25 | The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Sp… |
CVE-2021-21272 | High | 7.7 | 2021-01-25 | ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In… |
CVE-2021-23901 | Critical | 9.1 | 2021-01-25 | An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity i… |
CVE-2021-21270 | Medium | 6.2 | 2021-01-22 | OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC versi… |
CVE-2021-21260 | High | 7.6 | 2021-01-22 | Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini… |
CVE-2021-21259 | High | 7.4 | 2021-01-22 | HedgeDoc is open source software which lets you create real-time collaborative markdown notes. In HedgeDoc before version 1.7.2, an attacker can inject arbitra… |
CVE-2021-22849 | Medium | 4.6 | 2021-01-22 | Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS (Stored Cro… |
CVE-2021-22847 | High | 8.8 | 2021-01-22 | Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege. |
CVE-2021-21253 | Medium | 5.8 | 2021-01-21 | OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerabl… |
CVE-2021-21239 | Medium | 6.5 | 2021-01-21 | PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability… |
CVE-2021-21238 | Medium | 6.5 | 2021-01-21 | PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability… |
CVE-2021-1069 | Medium | 6.1 | 2021-01-20 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null pointer referen… |
CVE-2021-1068 | High | 7.8 | 2021-01-20 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory locatio… |
CVE-2021-1067 | Medium | 6.8 | 2021-01-20 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attacker can write to the… |
CVE-2021-1250 | Medium | 6.5 | 2021-01-20 | Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator… |
CVE-2021-1249 | Medium | 6.5 | 2021-01-20 | Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator… |
CVE-2021-1248 | High | 8.8 | 2021-01-20 | Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arb… |
CVE-2021-1247 | High | 8.8 | 2021-01-20 | Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arb… |
CVE-2021-1241 | High | 8.6 | 2021-01-20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affecte… |
CVE-2021-1235 | Medium | 5.5 | 2021-01-20 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system… |
CVE-2021-1233 | Medium | 4.4 | 2021-01-20 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The vul… |
CVE-2021-1225 | Critical | 9.1 | 2021-01-20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL… |
CVE-2021-1222 | High | 8.1 | 2021-01-20 | A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL in… |
CVE-2021-1219 | High | 7.8 | 2021-01-20 | A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system. T… |