2021 CVEs (page 39)
Page 39 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26598 | Medium | 5.3 | 2022-03-28 | ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have… |
CVE-2021-44127 | Critical | 9.8 | 2022-03-27 | In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the pa… |
CVE-2021-40906 | Medium | 6.1 | 2022-03-25 | CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflecte… |
CVE-2021-40905 | High | 8.8 | 2022-03-25 | The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extens… |
CVE-2021-40904 | High | 8.8 | 2022-03-25 | The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which all… |
CVE-2021-44683 | High | 8.2 | 2022-03-25 | The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function (used to open a secondary browser wi… |
CVE-2021-44905 | High | 8.2 | 2022-03-25 | Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthen… |
CVE-2021-4203 | Medium | 6.8 | 2022-03-25 | A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Lin… |
CVE-2021-4202 | High | 7.0 | 2022-03-25 | A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attac… |
CVE-2021-4157 | High | 8.0 | 2022-03-25 | An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files wi… |
CVE-2021-4147 | Medium | 6.5 | 2022-03-25 | A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting… |
CVE-2021-44768 | Medium | 6.1 | 2022-03-25 | Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an atta… |
CVE-2021-44477 | High | 7.5 | 2022-03-25 | GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result… |
CVE-2021-44462 | High | 7.8 | 2022-03-25 | This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues resul… |
CVE-2021-3941 | Medium | 6.5 | 2022-03-25 | In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;`… |
CVE-2021-3933 | Medium | 5.5 | 2022-03-25 | An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesP… |
CVE-2021-3814 | High | 7.5 | 2022-03-25 | It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses ac… |
CVE-2021-3582 | Medium | 6.5 | 2022-03-25 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improp… |
CVE-2021-3567 | High | 7.5 | 2022-03-25 | A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Cari… |
CVE-2021-3422 | High | 7.5 | 2022-03-25 | The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index… |
CVE-2021-35254 | High | 8.2 | 2022-03-25 | SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent t… |
CVE-2021-26622 | Critical | 9.6 | 2022-03-25 | An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers… |
CVE-2021-26621 | High | 8.1 | 2022-03-25 | An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property th… |
CVE-2021-26620 | High | 7.5 | 2022-03-25 | An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important informa… |
CVE-2021-22100 | Medium | 5.3 | 2022-03-25 | In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) cau… |
CVE-2021-20323 | Medium | 6.1 | 2022-03-25 | A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak. |
CVE-2021-20290 | Medium | 6.1 | 2022-03-25 | An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be… |
CVE-2021-43636 | Critical | 9.8 | 2022-03-25 | Two Buffer Overflow vulnerabilities exists in T10 V2_Firmware V4.1.8cu.5207_B20210320 in the http_request_parse function when processing host data in the HTTP… |
CVE-2021-43091 | High | 7.5 | 2022-03-25 | An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form. |
CVE-2021-46426 | Medium | 6.1 | 2022-03-25 | phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality. |
CVE-2021-43090 | Critical | 9.8 | 2022-03-25 | An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function. |
CVE-2021-44751 | Medium | 4.3 | 2022-03-25 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger diale… |
CVE-2021-43666 | High | 7.5 | 2022-03-24 | A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0. |
CVE-2021-43084 | Critical | 9.8 | 2022-03-24 | An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter. |
CVE-2021-39491 | Medium | 5.4 | 2022-03-24 | A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan Engine deletion confirmation modal box… |
CVE-2021-43659 | Medium | 5.4 | 2022-03-24 | In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerabili… |
CVE-2021-43700 | Critical | 9.8 | 2022-03-24 | An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=api&tag=8. |
CVE-2021-31326 | Critical | 9.8 | 2022-03-24 | D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi. |
CVE-2021-44226 | High | 7.3 | 2022-03-23 | Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGRAMDATA%\Razer has… |
CVE-2021-28278 | High | 7.8 | 2022-03-23 | A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c. |
CVE-2021-28277 | High | 7.8 | 2022-03-23 | A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c. |
CVE-2021-28276 | High | 7.5 | 2022-03-23 | A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c. |
CVE-2021-28275 | Medium | 5.5 | 2022-03-23 | A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault vi… |
CVE-2021-4219 | Medium | 5.5 | 2022-03-23 | A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker… |
CVE-2021-4197 | High | 7.8 | 2022-03-23 | An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some les… |
CVE-2021-4180 | Medium | 4.3 | 2022-03-23 | An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit thi… |
CVE-2021-4156 | High | 7.1 | 2022-03-23 | An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user… |
CVE-2021-4150 | Medium | 5.5 | 2022-03-23 | A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial… |
CVE-2021-4149 | Medium | 5.5 | 2022-03-23 | A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user… |
CVE-2021-4148 | Medium | 5.5 | 2022-03-23 | A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with u… |
CVE-2021-3748 | High | 7.5 | 2022-03-23 | A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region… |
CVE-2021-3618 | High | 7.4 | 2022-03-23 | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, su… |
CVE-2021-3589 | High | 8.0 | 2022-03-23 | An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through… |
CVE-2021-27476 | Critical | 10.0 | 2022-03-23 | A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote… |
CVE-2021-27475 | High | 8.6 | 2022-03-23 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers… |
CVE-2021-27474 | Critical | 10.0 | 2022-03-23 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability m… |
CVE-2021-27473 | Medium | 6.1 | 2022-03-23 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccwarc archive file during extraction. Thi… |
CVE-2021-27472 | Critical | 10.0 | 2022-03-23 | A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow fo… |
CVE-2021-27471 | High | 7.7 | 2022-03-23 | The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files… |
CVE-2021-27470 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized… |
CVE-2021-27468 | Critical | 10.0 | 2022-03-23 | The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerabilit… |
CVE-2021-27466 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies seriali… |
CVE-2021-27464 | Critical | 10.0 | 2022-03-23 | The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerab… |
CVE-2021-27462 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized… |
CVE-2021-27460 | Critical | 10.0 | 2022-03-23 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently… |
CVE-2021-27456 | Low | 2.4 | 2022-03-23 | Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control. |
CVE-2021-27430 | High | 8.4 | 2022-03-23 | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrup… |
CVE-2021-27428 | Critical | 9.8 | 2022-03-23 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool valida… |
CVE-2021-27426 | Critical | 9.8 | 2022-03-23 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing… |
CVE-2021-27424 | Medium | 5.3 | 2022-03-23 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS regis… |
CVE-2021-27422 | High | 7.5 | 2022-03-23 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without auth… |
CVE-2021-27420 | Medium | 5.3 | 2022-03-23 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming… |
CVE-2021-27418 | Medium | 5.3 | 2022-03-23 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possibl… |
CVE-2021-38772 | High | 7.5 | 2022-03-23 | Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function. |
CVE-2021-38278 | Critical | 9.8 | 2022-03-23 | Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function. |
CVE-2021-46064 | High | 7.8 | 2022-03-23 | IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user… |
CVE-2021-44139 | High | 7.5 | 2022-03-23 | Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF). |
CVE-2021-43737 | Medium | 6.5 | 2022-03-23 | An issus was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can modify administrator account's password. |
CVE-2021-43738 | High | 8.8 | 2022-03-23 | An issue was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can that can add the administrator account. |
CVE-2021-43736 | Critical | 9.8 | 2022-03-23 | CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule |
CVE-2021-43735 | Critical | 9.8 | 2022-03-23 | CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule. |
CVE-2021-44759 | High | 8.1 | 2022-03-23 | Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a man in the middle attack. This issue aff… |
CVE-2021-44040 | High | 7.5 | 2022-03-23 | Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache… |
CVE-2021-25220 | Medium | 6.8 | 2022-03-23 | BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 e… |
CVE-2021-45757 | High | 7.5 | 2022-03-23 | ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (DoS). |
CVE-2021-45756 | Critical | 9.8 | 2022-03-23 | Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi. |
CVE-2021-33961 | Medium | 6.1 | 2022-03-22 | A Cross Site Scripting (XSS) vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter. |
CVE-2021-41736 | Critical | 9.8 | 2022-03-22 | Faust v2.35.0 was discovered to contain a heap-buffer overflow in the function realPropagate() at propagate.cpp. |
CVE-2021-43650 | Critical | 9.8 | 2022-03-22 | WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username during the login process. |
CVE-2021-45810 | High | 7.5 | 2022-03-22 | GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService through DBUS, GUI. The way GlobalProtect-Op… |
CVE-2021-45809 | Critical | 9.8 | 2022-03-22 | GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Op… |
CVE-2021-40662 | High | 8.8 | 2022-03-21 | A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted U… |
CVE-2021-38745 | Medium | 6.8 | 2022-03-21 | Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin… |
CVE-2021-46390 | Medium | 6.8 | 2022-03-21 | An access control issue in the authentication module of Lexar_F35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service (DoS). An att… |
CVE-2021-25019 | Medium | 6.1 | 2022-03-21 | The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, l… |
CVE-2021-24905 | High | 8.0 | 2022-03-21 | The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and d… |
CVE-2021-45117 | Medium | 6.5 | 2022-03-21 | The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference. |
CVE-2021-45878 | Critical | 9.1 | 2022-03-21 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control. Lack of access control on the web manger pages allows any user to view… |
CVE-2021-45877 | Critical | 9.8 | 2022-03-21 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allow… |
CVE-2021-45876 | Critical | 9.8 | 2022-03-21 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection. The url parameter of the function module downloadAndUpdate is… |