2021 CVEs (page 41)
Page 41 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39726 | High | 7.5 | 2022-03-16 | In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no… |
CVE-2021-39725 | Medium | 6.7 | 2022-03-16 | In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of p… |
CVE-2021-39724 | Medium | 4.4 | 2022-03-16 | In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2021-39723 | Critical | 9.8 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A |
CVE-2021-39722 | Medium | 4.4 | 2022-03-16 | In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead… |
CVE-2021-39721 | Medium | 6.7 | 2022-03-16 | In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privile… |
CVE-2021-39720 | Critical | 9.8 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A |
CVE-2021-39719 | Medium | 6.7 | 2022-03-16 | In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privil… |
CVE-2021-39718 | Medium | 6.7 | 2022-03-16 | In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lea… |
CVE-2021-39717 | Medium | 4.4 | 2022-03-16 | In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosu… |
CVE-2021-39716 | High | 7.5 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A |
CVE-2021-39715 | Medium | 4.4 | 2022-03-16 | In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure. This could lead to local information di… |
CVE-2021-39714 | High | 7.8 | 2022-03-16 | In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2021-39713 | High | 7.0 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel |
CVE-2021-39712 | Medium | 6.4 | 2022-03-16 | In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System executio… |
CVE-2021-39711 | Medium | 4.4 | 2022-03-16 | In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure wit… |
CVE-2021-39710 | Critical | 9.8 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A |
CVE-2021-39709 | High | 7.8 | 2022-03-16 | In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loca… |
CVE-2021-39708 | Critical | 9.8 | 2022-03-16 | In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of p… |
CVE-2021-39707 | High | 7.8 | 2022-03-16 | In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to lo… |
CVE-2021-39706 | High | 7.8 | 2022-03-16 | In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to… |
CVE-2021-39704 | High | 7.8 | 2022-03-16 | In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notification due to a perm… |
CVE-2021-39703 | High | 7.8 | 2022-03-16 | In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of priv… |
CVE-2021-39702 | High | 7.8 | 2022-03-16 | In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/o… |
CVE-2021-39701 | High | 7.8 | 2022-03-16 | In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission d… |
CVE-2021-39698 | High | 7.8 | 2022-03-16 | In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no add… |
CVE-2021-39697 | High | 7.8 | 2022-03-16 | In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing permiss… |
CVE-2021-39695 | High | 7.8 | 2022-03-16 | In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil… |
CVE-2021-39694 | High | 7.8 | 2022-03-16 | In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could… |
CVE-2021-39693 | High | 7.8 | 2022-03-16 | In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could… |
CVE-2021-39692 | High | 7.8 | 2022-03-16 | In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could… |
CVE-2021-39690 | Medium | 5.5 | 2022-03-16 | In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper input validation. This could lead to lo… |
CVE-2021-39689 | Medium | 6.7 | 2022-03-16 | In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local escalatio… |
CVE-2021-39686 | High | 7.0 | 2022-03-16 | In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation… |
CVE-2021-39685 | High | 7.8 | 2022-03-16 | In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalati… |
CVE-2021-39667 | Medium | 6.5 | 2022-03-16 | In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote informat… |
CVE-2021-39624 | Medium | 5.5 | 2022-03-16 | In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution p… |
CVE-2021-33853 | Medium | 5.4 | 2022-03-16 | A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a trusted website. As th… |
CVE-2021-23165 | Critical | 9.8 | 2022-03-16 | A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of se… |
CVE-2021-23158 | Critical | 9.8 | 2022-03-16 | A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker t… |
CVE-2021-20299 | High | 7.5 | 2022-03-16 | A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference… |
CVE-2021-20257 | Medium | 6.5 | 2022-03-16 | An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if vari… |
CVE-2021-20180 | Medium | 5.5 | 2022-03-16 | A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbu… |
CVE-2021-0957 | High | 7.8 | 2022-03-16 | In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local e… |
CVE-2021-45787 | Medium | 5.4 | 2022-03-16 | There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name… |
CVE-2021-45786 | Critical | 9.8 | 2022-03-16 | In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges. |
CVE-2021-42552 | Medium | 6.1 | 2022-03-16 | Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a vict… |
CVE-2021-46705 | Medium | 5.1 | 2022-03-16 | A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbit… |
CVE-2021-45852 | Medium | 5.3 | 2022-03-16 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient… |
CVE-2021-45851 | High | 7.5 | 2022-03-16 | A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal envir… |
CVE-2021-43958 | Critical | 9.8 | 2022-03-16 | Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest resources did not ch… |
CVE-2021-43957 | High | 7.5 | 2022-03-16 | Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability… |
CVE-2021-43956 | Medium | 6.1 | 2022-03-16 | The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a protot… |
CVE-2021-43955 | Medium | 4.3 | 2022-03-16 | The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about inst… |
CVE-2021-29134 | Medium | 5.3 | 2022-03-15 | The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL. |
CVE-2021-45848 | High | 7.5 | 2022-03-15 | Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download… |
CVE-2021-45010 | High | 8.8 | 2022-03-15 | A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid us… |
CVE-2021-43305 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-43304 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-42391 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation… |
CVE-2021-42390 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operat… |
CVE-2021-42389 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation wi… |
CVE-2021-42388 | High | 8.1 | 2022-03-14 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user… |
CVE-2021-42387 | High | 8.1 | 2022-03-14 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user… |
CVE-2021-39055 | Medium | 5.4 | 2022-03-14 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript… |
CVE-2021-39051 | Medium | 6.5 | 2022-03-14 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registr… |
CVE-2021-38971 | Medium | 4.9 | 2022-03-14 | IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensi… |
CVE-2021-44964 | Medium | 6.3 | 2022-03-14 | Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file. |
CVE-2021-42171 | High | 7.2 | 2022-03-14 | Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse sys… |
CVE-2021-41952 | Medium | 4.8 | 2022-03-14 | Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim's… |
CVE-2021-25026 | Medium | 5.5 | 2022-03-14 | The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privilege users to perform… |
CVE-2021-25007 | Critical | 9.8 | 2022-03-14 | The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection |
CVE-2021-25006 | Medium | 6.1 | 2022-03-14 | The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-S… |
CVE-2021-25003 | Critical | 9.8 | 2022-03-14 | The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web ser… |
CVE-2021-24996 | Medium | 6.1 | 2022-03-14 | The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpay_error parameter before outputting it back in the page leadin… |
CVE-2021-24995 | Medium | 4.8 | 2022-03-14 | The HTML5 Responsive FAQ WordPress plugin through 2.8.5 does not properly sanitise and escape some of its settings, which could allow a high privilege users to… |
CVE-2021-24982 | Medium | 6.4 | 2022-03-14 | The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-… |
CVE-2021-24966 | Medium | 4.9 | 2022-03-14 | The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files… |
CVE-2021-24959 | High | 8.8 | 2022-03-14 | The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJAX action, available to any authenticate… |
CVE-2021-24958 | Medium | 5.4 | 2022-03-14 | The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action… |
CVE-2021-24950 | Medium | 5.4 | 2022-03-14 | The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_options_import (available to any authen… |
CVE-2021-24940 | Medium | 6.1 | 2022-03-14 | The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which… |
CVE-2021-24897 | Medium | 5.4 | 2022-03-14 | The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with classic editor) when output in the page, w… |
CVE-2021-24895 | Medium | 4.8 | 2022-03-14 | The Cybersoldier WordPress plugin before 1.7.0 does not sanitise and escape the URL settings before outputting it in an attribute, which could allow high privi… |
CVE-2021-24692 | Medium | 6.5 | 2022-03-14 | The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web server (such as wp-con… |
CVE-2021-43954 | Medium | 4.3 | 2022-03-14 | The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enu… |
CVE-2021-46709 | Medium | 6.1 | 2022-03-13 | phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number). |
CVE-2021-45889 | Medium | 5.4 | 2022-03-13 | An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as demonstrated by private/index.jsp?partners… |
CVE-2021-45888 | Medium | 4.8 | 2022-03-13 | An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulne… |
CVE-2021-45887 | Critical | 9.8 | 2022-03-13 | An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for uploaded ZIP files, an executable script… |
CVE-2021-45886 | High | 8.8 | 2022-03-13 | An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web application vulnerable to a weakened version… |
CVE-2021-36368 | Low | 3.7 | 2022-03-13 | An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an atta… |
CVE-2021-42577 | High | 7.5 | 2022-03-11 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference. |
CVE-2021-42262 | Medium | 6.5 | 2022-03-11 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-mem… |
CVE-2021-41850 | High | 7.8 | 2022-03-11 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values… |
CVE-2021-41849 | Medium | 5.5 | 2022-03-11 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information (PII) in plaintext using HTTP to… |
CVE-2021-41848 | High | 7.8 | 2022-03-11 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can provide a spoofed softwa… |
CVE-2021-44667 | Medium | 6.1 | 2022-03-11 | A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters. |
CVE-2021-33658 | High | 7.8 | 2022-03-11 | atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file… |
CVE-2021-33150 | Medium | 6.8 | 2022-03-11 | Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enabl… |