2021 CVEs (page 33)
Page 33 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27433 | High | 7.3 | 2022-05-03 | ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulti… |
CVE-2021-27431 | High | 7.3 | 2022-05-03 | ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrar… |
CVE-2021-27427 | High | 7.3 | 2022-05-03 | RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulti… |
CVE-2021-27425 | High | 7.3 | 2022-05-03 | Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory a… |
CVE-2021-27421 | High | 7.3 | 2022-05-03 | NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the… |
CVE-2021-27419 | High | 7.3 | 2022-05-03 | uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memo… |
CVE-2021-27417 | Medium | 4.6 | 2022-05-03 | eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified mem… |
CVE-2021-27411 | Medium | 6.5 | 2022-05-03 | Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverif… |
CVE-2021-22680 | High | 7.3 | 2022-05-03 | NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can le… |
CVE-2021-29854 | High | 7.2 | 2022-05-03 | IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending… |
CVE-2021-46440 | High | 7.5 | 2022-05-03 | Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a vict… |
CVE-2021-22573 | High | 8.7 | 2022-05-03 | The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from v… |
CVE-2021-22556 | Medium | 5.3 | 2022-05-03 | The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that th… |
CVE-2021-39390 | Medium | 5.4 | 2022-05-03 | Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter. |
CVE-2021-42165 | High | 8.8 | 2022-05-03 | MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bas… |
CVE-2021-42218 | High | 7.5 | 2022-05-03 | OMPL v1.5.2 contains a memory leak in VFRRT.cpp |
CVE-2021-41959 | High | 7.5 | 2022-05-03 | JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, whic… |
CVE-2021-4138 | Medium | 5.3 | 2022-05-02 | Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname. |
CVE-2021-42532 | High | 7.8 | 2022-05-02 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in t… |
CVE-2021-42531 | High | 7.8 | 2022-05-02 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in t… |
CVE-2021-42530 | High | 7.8 | 2022-05-02 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in t… |
CVE-2021-42529 | High | 7.8 | 2022-05-02 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in t… |
CVE-2021-42528 | Medium | 5.5 | 2022-05-02 | XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker co… |
CVE-2021-41810 | Medium | 5.2 | 2022-05-02 | Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration d… |
CVE-2021-36844 | Low | 3.4 | 2022-05-02 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress. |
CVE-2021-3750 | High | 8.2 | 2022-05-02 | A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it… |
CVE-2021-3643 | Critical | 9.1 | 2022-05-02 | A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious… |
CVE-2021-29859 | Medium | 6.8 | 2022-05-02 | IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 t… |
CVE-2021-25102 | Medium | 4.7 | 2022-05-02 | The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redire… |
CVE-2021-25086 | Medium | 6.1 | 2022-05-02 | The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing… |
CVE-2021-25002 | High | 7.5 | 2022-05-02 | The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to acce… |
CVE-2021-4200 | Medium | 5.4 | 2022-05-02 | A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue… |
CVE-2021-46790 | High | 7.8 | 2022-05-02 | ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; howeve… |
CVE-2021-36784 | High | 7.2 | 2022-05-02 | A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE R… |
CVE-2021-36778 | High | 7.3 | 2022-05-02 | A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers… |
CVE-2021-40822 | High | 7.5 | 2022-05-02 | GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host. |
CVE-2021-31674 | Medium | 6.1 | 2022-05-02 | Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefi… |
CVE-2021-31673 | Medium | 6.1 | 2022-05-02 | A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web sc… |
CVE-2021-42001 | High | 8.0 | 2022-04-30 | PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting t… |
CVE-2021-41994 | Medium | 6.6 | 2022-04-30 | A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID… |
CVE-2021-41993 | Medium | 6.6 | 2022-04-30 | A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using Pin… |
CVE-2021-41992 | High | 7.7 | 2022-04-30 | A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass. |
CVE-2021-4207 | High | 8.2 | 2022-04-29 | A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can… |
CVE-2021-4206 | High | 8.2 | 2022-04-29 | A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor o… |
CVE-2021-3982 | Medium | 5.5 | 2022-04-29 | Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take ad… |
CVE-2021-36207 | High | 8.8 | 2022-04-29 | Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their… |
CVE-2021-43938 | High | 8.1 | 2022-04-29 | Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization. |
CVE-2021-43937 | High | 7.6 | 2022-04-29 | Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally pro… |
CVE-2021-39082 | High | 7.5 | 2022-04-29 | IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
CVE-2021-41948 | Medium | 5.4 | 2022-04-29 | A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects". |
CVE-2021-44596 | Critical | 9.8 | 2022-04-29 | Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate ov… |
CVE-2021-44595 | High | 8.8 | 2022-04-29 | Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the Elevatio… |
CVE-2021-41942 | High | 7.5 | 2022-04-29 | The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database. |
CVE-2021-38952 | Medium | 5.4 | 2022-04-28 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2021-43939 | High | 8.8 | 2022-04-28 | Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired… |
CVE-2021-43934 | Critical | 9.8 | 2022-04-28 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload… |
CVE-2021-43932 | Critical | 9.0 | 2022-04-28 | Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main… |
CVE-2021-43930 | Medium | 4.9 | 2022-04-28 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path trav… |
CVE-2021-41945 | Critical | 9.1 | 2022-04-28 | Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. |
CVE-2021-41921 | Critical | 9.8 | 2022-04-28 | novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution. |
CVE-2021-33436 | High | 7.3 | 2022-04-28 | NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows l… |
CVE-2021-3523 | High | 7.5 | 2022-04-27 | A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass s… |
CVE-2021-25266 | Low | 3.9 | 2022-04-27 | An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticato… |
CVE-2021-38939 | Medium | 5.3 | 2022-04-27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Fo… |
CVE-2021-38919 | High | 7.5 | 2022-04-27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021 |
CVE-2021-38878 | High | 7.5 | 2022-04-27 | IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756. |
CVE-2021-38874 | Medium | 4.3 | 2022-04-27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. IBM X-Force ID: 208397. |
CVE-2021-38869 | Critical | 9.8 | 2022-04-27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341. |
CVE-2021-34602 | High | 8.8 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands i… |
CVE-2021-34601 | Critical | 9.8 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone… |
CVE-2021-34592 | High | 8.8 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands i… |
CVE-2021-34591 | High | 7.8 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid ap… |
CVE-2021-34590 | Medium | 5.4 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration va… |
CVE-2021-34589 | High | 7.5 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the… |
CVE-2021-34588 | High | 8.6 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at use… |
CVE-2021-34587 | Medium | 5.3 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable. |
CVE-2021-29776 | Medium | 4.3 | 2022-04-27 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of… |
CVE-2021-46424 | Critical | 9.1 | 2022-04-27 | Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal fil… |
CVE-2021-46423 | Medium | 5.3 | 2022-04-27 | Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full configuration file. |
CVE-2021-46422 | Critical | 9.8 | 2022-04-27 | Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication. |
CVE-2021-46442 | Critical | 9.8 | 2022-04-27 | In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloadin… |
CVE-2021-46441 | High | 8.8 | 2022-04-27 | In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system comm… |
CVE-2021-46421 | High | 7.5 | 2022-04-27 | Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensi… |
CVE-2021-46420 | High | 7.5 | 2022-04-27 | Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sen… |
CVE-2021-41041 | Medium | 5.3 | 2022-04-27 | In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a Meth… |
CVE-2021-36895 | Medium | 4.7 | 2022-04-26 | Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload. |
CVE-2021-36867 | Medium | 5.4 | 2022-04-26 | Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with c… |
CVE-2021-26629 | High | 8.8 | 2022-04-26 | A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an a… |
CVE-2021-26628 | High | 8.1 | 2022-04-26 | Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu… |
CVE-2021-35250 | High | 7.5 | 2022-04-25 | A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files… |
CVE-2021-4225 | High | 8.8 | 2022-04-25 | The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to pre… |
CVE-2021-46782 | Medium | 6.1 | 2022-04-25 | The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard… |
CVE-2021-46781 | Medium | 6.1 | 2022-04-25 | The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admi… |
CVE-2021-46780 | Medium | 6.1 | 2022-04-25 | The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading… |
CVE-2021-39040 | High | 8.0 | 2022-04-25 | IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this wea… |
CVE-2021-25111 | Medium | 6.1 | 2022-04-25 | The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an o… |
CVE-2021-25094 | High | 8.1 | 2022-04-25 | The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under… |
CVE-2021-24957 | High | 8.8 | 2022-04-25 | The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_ar… |
CVE-2021-24805 | Medium | 4.3 | 2022-04-25 | The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in use… |
CVE-2021-24800 | Medium | 4.3 | 2022-04-25 | The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user t… |