2021 CVEs (page 23)
Page 23 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20030 | High | 7.5 | 2022-10-13 | SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's bina… |
CVE-2021-36369 | High | 7.5 | 2022-10-12 | An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it i… |
CVE-2021-36201 | Medium | 4.3 | 2022-10-11 | Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions. |
CVE-2021-36915 | Medium | 4.2 | 2022-10-11 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows uploading the JSON file and updating the opti… |
CVE-2021-0951 | High | 7.8 | 2022-10-11 | In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege with… |
CVE-2021-0696 | High | 7.0 | 2022-10-11 | In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no addition… |
CVE-2021-36913 | High | 7.5 | 2022-10-11 | Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to… |
CVE-2021-36899 | Medium | 4.8 | 2022-10-11 | Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress. |
CVE-2021-35226 | Medium | 6.5 | 2022-10-10 | An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials a… |
CVE-2021-25044 | Medium | 6.1 | 2022-10-10 | The Cryptocurrency Pricing list and Ticker WordPress plugin through 1.5 does not sanitise and escape the ccpw_setpage parameter before outputting it back in pa… |
CVE-2021-44171 | Critical | 9.0 | 2022-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version… |
CVE-2021-40166 | High | 7.8 | 2022-10-07 | A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them… |
CVE-2021-40165 | High | 7.8 | 2022-10-07 | A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF… |
CVE-2021-40164 | High | 7.8 | 2022-10-07 | A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. |
CVE-2021-40163 | High | 7.8 | 2022-10-07 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. |
CVE-2021-40162 | High | 7.8 | 2022-10-07 | A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TI… |
CVE-2021-40556 | High | 8.8 | 2022-10-06 | A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat functi… |
CVE-2021-36865 | Low | 3.8 | 2022-09-30 | Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPress allows attackers to change the conten… |
CVE-2021-33354 | High | 8.1 | 2022-09-30 | Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via modified file parameter. |
CVE-2021-36855 | Medium | 6.1 | 2022-09-30 | Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress. |
CVE-2021-36854 | Medium | 5.4 | 2022-09-30 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress. |
CVE-2021-36839 | Medium | 4.8 | 2022-09-30 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Follow Buttons Bar plugin <= 4.73 at WordPress. |
CVE-2021-36830 | Medium | 4.8 | 2022-09-30 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Comment Guestbook plugin <= 0.8.0 at WordPress. |
CVE-2021-45843 | Medium | 6.1 | 2022-09-29 | glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting (XSS) vulnerability. The value of the title request parameter is copied into the value of a… |
CVE-2021-45790 | Critical | 9.8 | 2022-09-29 | An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can… |
CVE-2021-45789 | Medium | 6.5 | 2022-09-29 | An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function. |
CVE-2021-45788 | High | 8.8 | 2022-09-29 | Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter. |
CVE-2021-43403 | Medium | 6.5 | 2022-09-29 | An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download… |
CVE-2021-42049 | Medium | 6.5 | 2022-09-29 | An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed… |
CVE-2021-42048 | Medium | 4.8 | 2022-09-29 | An issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add arbitrary JavaScript code to the Newcomer home page footer, whic… |
CVE-2021-42047 | Medium | 5.4 | 2022-09-29 | An issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the Mentor Dashboard feature enabled, users can login with a ment… |
CVE-2021-42046 | Medium | 6.1 | 2022-09-29 | An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escaped and al… |
CVE-2021-42045 | Medium | 5.4 | 2022-09-29 | An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Age… |
CVE-2021-40695 | Medium | 4.3 | 2022-09-29 | It was possible for a student to view their quiz grade before it had been released, using a quiz web service. |
CVE-2021-40694 | Medium | 4.9 | 2022-09-29 | Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account. |
CVE-2021-40693 | Medium | 6.5 | 2022-09-29 | An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability. |
CVE-2021-40692 | Medium | 4.3 | 2022-09-29 | Insufficient capability checks made it possible for teachers to download users outside of their courses. |
CVE-2021-40691 | Medium | 4.3 | 2022-09-29 | A session hijack risk was identified in the Shibboleth authentication plugin. |
CVE-2021-41434 | Medium | 5.4 | 2022-09-28 | A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of Jav… |
CVE-2021-43980 | Low | 3.7 | 2022-09-28 | The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extrem… |
CVE-2021-41433 | Critical | 9.8 | 2022-09-27 | SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows au… |
CVE-2021-27862 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (… |
CVE-2021-27861 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers) |
CVE-2021-27854 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from… |
CVE-2021-27853 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers. |
CVE-2021-28052 | High | 7.5 | 2022-09-26 | A tenant administrator Hitachi Content Platform (HCP) may modify the configuration in another tenant without authorization, potentially allowing unauthorized a… |
CVE-2021-41437 | Medium | 6.5 | 2022-09-26 | An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authentic… |
CVE-2021-24890 | High | 8.8 | 2022-09-26 | The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and… |
CVE-2021-45035 | Medium | 6.3 | 2022-09-23 | Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the… |
CVE-2021-3782 | Medium | 6.6 | 2022-09-23 | An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an i… |
CVE-2021-41803 | High | 7.1 | 2022-09-23 | HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim assert… |
CVE-2021-27774 | Low | 3.1 | 2022-09-22 | User input included in error response, which could be used in a phishing attack. |
CVE-2021-39190 | Medium | 5.3 | 2022-09-22 | The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly… |
CVE-2021-43310 | Critical | 9.8 | 2022-09-21 | A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to… |
CVE-2021-46835 | Medium | 4.3 | 2022-09-20 | There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. |
CVE-2021-46834 | Medium | 5.5 | 2022-09-20 | A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected p… |
CVE-2021-33081 | High | 7.9 | 2022-09-20 | Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local a… |
CVE-2021-33079 | Medium | 4.1 | 2022-09-20 | Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local a… |
CVE-2021-33076 | Medium | 5.3 | 2022-09-20 | Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physi… |
CVE-2021-46836 | High | 7.5 | 2022-09-16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confid… |
CVE-2021-40024 | High | 7.5 | 2022-09-16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confid… |
CVE-2021-40023 | High | 7.5 | 2022-09-16 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. |
CVE-2021-40019 | Critical | 9.1 | 2022-09-16 | Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2021-40017 | Critical | 9.8 | 2022-09-16 | The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access. |
CVE-2021-42597 | Medium | 5.4 | 2022-09-16 | A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add N… |
CVE-2021-41731 | Medium | 4.8 | 2022-09-16 | Cross Site Scripting (XSS vulnerability exists in )Sourcecodester News247 News Magazine (CMS) PHP 5.6 or higher and MySQL 5.7 or higher via the blog category n… |
CVE-2021-42948 | Low | 3.7 | 2022-09-16 | HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to… |
CVE-2021-42949 | Critical | 9.8 | 2022-09-16 | The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authe… |
CVE-2021-44076 | Medium | 4.8 | 2022-09-15 | An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the admin… |
CVE-2021-38924 | High | 7.5 | 2022-09-14 | IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is return… |
CVE-2021-36568 | Medium | 5.4 | 2022-09-13 | In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" whe… |
CVE-2021-0943 | High | 7.8 | 2022-09-13 | In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no addi… |
CVE-2021-0942 | Critical | 9.8 | 2022-09-13 | The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:s… |
CVE-2021-0871 | High | 7.8 | 2022-09-13 | In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bound… |
CVE-2021-0697 | High | 7.0 | 2022-09-13 | In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2021-44426 | High | 8.8 | 2022-09-12 | An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local ~/Downloads/ directory is possible i… |
CVE-2021-44425 | Medium | 6.5 | 2022-09-12 | An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open listening port on a machine in the LAN of an attacker, opened by… |
CVE-2021-37819 | High | 7.5 | 2022-09-09 | PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java. |
CVE-2021-44835 | Critical | 9.8 | 2022-09-09 | An issue was discovered in Active Intelligent Visualization 5. The Vdc header is used in a SQL query without being sanitized. This causes SQL injection. |
CVE-2021-40648 | Medium | 5.5 | 2022-09-09 | In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nextsize of the current… |
CVE-2021-40647 | Medium | 5.5 | 2022-09-09 | In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program… |
CVE-2021-34236 | Critical | 9.8 | 2022-09-08 | Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a cra… |
CVE-2021-36783 | Critical | 9.9 | 2022-09-07 | A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members t… |
CVE-2021-36782 | Critical | 9.9 | 2022-09-07 | A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Member… |
CVE-2021-43565 | High | 7.5 | 2022-09-06 | The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server. |
CVE-2021-36829 | Medium | 4.8 | 2022-09-06 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 at WordPress. |
CVE-2021-43080 | Medium | 4.6 | 2022-09-06 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version 6.4.0 through 6.4.9, version 7.0.0 thro… |
CVE-2021-43076 | Medium | 6.3 | 2022-09-06 | An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and… |
CVE-2021-28398 | High | 7.2 | 2022-09-05 | A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely… |
CVE-2021-27693 | Critical | 9.8 | 2022-09-02 | Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage. |
CVE-2021-44718 | Medium | 5.9 | 2022-09-02 | wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-th… |
CVE-2021-35135 | Medium | 6.2 | 2022-09-02 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2021-35134 | High | 8.4 | 2022-09-02 | Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivit… |
CVE-2021-35133 | Medium | 6.7 | 2022-09-02 | Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdrago… |
CVE-2021-35132 | High | 8.4 | 2022-09-02 | Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-35122 | Critical | 9.3 | 2022-09-02 | Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2021-35113 | High | 7.3 | 2022-09-02 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Co… |
CVE-2021-35109 | Medium | 6.8 | 2022-09-02 | Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mo… |
CVE-2021-35108 | Medium | 6.8 | 2022-09-02 | Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivit… |
CVE-2021-35097 | High | 7.3 | 2022-09-02 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Co… |