2021 CVEs (page 38)
Page 38 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39786 | Medium | 6.7 | 2022-03-30 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-39784 | High | 7.8 | 2022-03-30 | In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission check. This could lead to local escalation… |
CVE-2021-39783 | High | 7.8 | 2022-03-30 | In rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This could lead to local escalation of privilege with no additiona… |
CVE-2021-39782 | High | 7.8 | 2022-03-30 | In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of priv… |
CVE-2021-39781 | High | 7.8 | 2022-03-30 | In SmsController, there is a possible information disclosure due to a permissions bypass. This could lead to local escalation of privilege and sending sms with… |
CVE-2021-39780 | High | 7.8 | 2022-03-30 | In Traceur, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to loc… |
CVE-2021-39779 | Medium | 5.5 | 2022-03-30 | In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no… |
CVE-2021-39778 | Medium | 5.5 | 2022-03-30 | In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to… |
CVE-2021-39777 | Medium | 5.5 | 2022-03-30 | In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead t… |
CVE-2021-39776 | High | 7.8 | 2022-03-30 | In NFC, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed… |
CVE-2021-39775 | Medium | 5.5 | 2022-03-30 | In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2021-39774 | Medium | 5.5 | 2022-03-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution pri… |
CVE-2021-39773 | Medium | 5.5 | 2022-03-30 | In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information… |
CVE-2021-39772 | High | 8.8 | 2022-03-30 | In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privile… |
CVE-2021-39771 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalatio… |
CVE-2021-39770 | Medium | 5.5 | 2022-03-30 | In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure wit… |
CVE-2021-39769 | Medium | 5.5 | 2022-03-30 | In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could le… |
CVE-2021-39768 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing permission check. This could lead to local… |
CVE-2021-39767 | High | 7.8 | 2022-03-30 | In miniadb, there is a possible way to get read/write access to recovery system properties due to an insecure default value. This could lead to local escalatio… |
CVE-2021-39766 | Medium | 5.5 | 2022-03-30 | In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This coul… |
CVE-2021-39765 | Medium | 5.5 | 2022-03-30 | In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with User execution privileges need… |
CVE-2021-39764 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via ap… |
CVE-2021-39763 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no ad… |
CVE-2021-39762 | High | 7.5 | 2022-03-30 | In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution pr… |
CVE-2021-39761 | Medium | 5.5 | 2022-03-30 | In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could l… |
CVE-2021-39760 | Medium | 5.5 | 2022-03-30 | In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2021-39759 | High | 7.8 | 2022-03-30 | In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec… |
CVE-2021-39758 | High | 7.8 | 2022-03-30 | In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permission check. This could lead to local escala… |
CVE-2021-39757 | Medium | 5.5 | 2022-03-30 | In PermissionController, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execut… |
CVE-2021-39756 | Medium | 5.5 | 2022-03-30 | In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This cou… |
CVE-2021-39755 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query permissions due to side channel informatio… |
CVE-2021-39754 | Medium | 5.5 | 2022-03-30 | In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This c… |
CVE-2021-39753 | Medium | 5.5 | 2022-03-30 | In DomainVerificationService, there is a possible way to access app domain verification information due to a missing permission check. This could lead to local… |
CVE-2021-39752 | High | 7.8 | 2022-03-30 | In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local escalation of privilege with no additional… |
CVE-2021-39751 | Medium | 5.5 | 2022-03-30 | In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permission check. This could lead to local info… |
CVE-2021-39750 | High | 7.8 | 2022-03-30 | In PackageManager, there is a possible way to change the splash screen theme of other apps due to a missing permission check. This could lead to local escalati… |
CVE-2021-39749 | High | 7.8 | 2022-03-30 | In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission check. This could lead to local escalation… |
CVE-2021-39748 | Medium | 5.5 | 2022-03-30 | In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information… |
CVE-2021-39747 | Medium | 5.5 | 2022-03-30 | In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass. This could lead to local information… |
CVE-2021-39746 | High | 7.8 | 2022-03-30 | In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege wi… |
CVE-2021-39745 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2021-39744 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2021-39743 | High | 7.8 | 2022-03-30 | In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission check. This could lead to local escalat… |
CVE-2021-39742 | Medium | 5.5 | 2022-03-30 | In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure wit… |
CVE-2021-39741 | High | 7.8 | 2022-03-30 | In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2021-39740 | Medium | 5.5 | 2022-03-30 | In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with… |
CVE-2021-39739 | Low | 3.3 | 2022-03-30 | In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with Sy… |
CVE-2021-23851 | Medium | 6.8 | 2022-03-30 | A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote cod… |
CVE-2021-23850 | Medium | 6.8 | 2022-03-30 | A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote co… |
CVE-2021-1033 | High | 7.8 | 2022-03-30 | In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loca… |
CVE-2021-1000 | High | 7.8 | 2022-03-30 | In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to l… |
CVE-2021-41594 | Medium | 6.5 | 2022-03-30 | In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by intercepting the API request at the /api/V2… |
CVE-2021-44082 | High | 8.3 | 2022-03-29 | textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger rem… |
CVE-2021-43118 | Critical | 9.8 | 2022-03-29 | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP me… |
CVE-2021-42911 | Critical | 9.8 | 2022-03-29 | A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B <= 1.5.1.3 in the mainfunction.cgi… |
CVE-2021-43110 | Critical | 9.8 | 2022-03-29 | An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in add_products. |
CVE-2021-43109 | High | 7.5 | 2022-03-29 | An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php. |
CVE-2021-42970 | Medium | 6.1 | 2022-03-29 | Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter. |
CVE-2021-44081 | High | 7.5 | 2022-03-29 | A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4. When the length of MSIN in Supi exceeds 24 characters, it leads to AMF denial of service. |
CVE-2021-43701 | Medium | 6.5 | 2022-03-29 | CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/article_db, via the fieldS[] and orderby para… |
CVE-2021-22572 | Medium | 5.5 | 2022-03-29 | On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the… |
CVE-2021-46743 | Critical | 9.1 | 2022-03-29 | In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are lo… |
CVE-2021-45866 | Medium | 5.4 | 2022-03-29 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php. |
CVE-2021-45865 | Critical | 9.8 | 2022-03-29 | A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality. |
CVE-2021-44581 | High | 7.5 | 2022-03-29 | An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter. |
CVE-2021-43105 | Medium | 4.3 | 2022-03-28 | A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any d… |
CVE-2021-43103 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43102 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43101 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrar… |
CVE-2021-43100 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. |
CVE-2021-43099 | Medium | 4.9 | 2022-03-28 | An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary uplade… |
CVE-2021-43098 | High | 7.2 | 2022-03-28 | A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. |
CVE-2021-43097 | High | 7.2 | 2022-03-28 | A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code. |
CVE-2021-4191 | Medium | 5.3 | 2022-03-28 | An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted si… |
CVE-2021-39876 | Medium | 4.3 | 2022-03-28 | In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups. |
CVE-2021-25071 | Medium | 6.1 | 2022-03-28 | The WordPress plugin through 2.0.1 does not sanitise and escape the translation parameter before outputting it back in an admin page, leading to a Reflected Cr… |
CVE-2021-25070 | Critical | 9.8 | 2022-03-28 | The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading… |
CVE-2021-25068 | High | 7.2 | 2022-03-28 | The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter which is not properly sanitized for use i… |
CVE-2021-25064 | High | 7.2 | 2022-03-28 | The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authentic… |
CVE-2021-25012 | Medium | 6.1 | 2022-03-28 | The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading… |
CVE-2021-24978 | Medium | 5.3 | 2022-03-28 | The OSMapper WordPress plugin through 2.1.5 contains an AJAX action to delete a plugin related post type named 'map' and is registered with the wp_ajax_nopriv… |
CVE-2021-24962 | High | 8.8 | 2022-03-28 | The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode… |
CVE-2021-24746 | Medium | 6.1 | 2022-03-28 | The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable '… |
CVE-2021-44124 | High | 7.5 | 2022-03-28 | Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from S… |
CVE-2021-43721 | Medium | 6.1 | 2022-03-28 | Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload : <video src=x onerror=(f… |
CVE-2021-43725 | Medium | 6.1 | 2022-03-28 | There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web scr… |
CVE-2021-46434 | Medium | 5.3 | 2022-03-28 | EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depen… |
CVE-2021-46433 | Critical | 10.0 | 2022-03-28 | In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disab… |
CVE-2021-45491 | Medium | 6.5 | 2022-03-28 | 3CX System through 2022-03-17 stores cleartext passwords in a database. |
CVE-2021-45490 | Critical | 9.1 | 2022-03-28 | The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation. |
CVE-2021-44617 | Critical | 9.8 | 2022-03-28 | A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated. |
CVE-2021-44213 | Medium | 6.1 | 2022-03-28 | OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message. |
CVE-2021-44212 | Medium | 6.1 | 2022-03-28 | OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring. |
CVE-2021-44211 | Medium | 5.4 | 2022-03-28 | OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature. |
CVE-2021-44210 | Medium | 6.1 | 2022-03-28 | OX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data. |
CVE-2021-44209 | Medium | 6.1 | 2022-03-28 | OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO. |
CVE-2021-44208 | Medium | 6.1 | 2022-03-28 | OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat. |
CVE-2021-26601 | High | 8.1 | 2022-03-28 | ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal. |
CVE-2021-26600 | Critical | 9.8 | 2022-03-28 | ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==). |
CVE-2021-26599 | Critical | 9.8 | 2022-03-28 | ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection. |