2021 CVEs (page 53)
Page 53 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44388 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44387 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44386 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44385 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44384 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44383 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44382 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44381 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44380 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44379 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44378 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44377 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44376 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44374 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44373 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44372 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44371 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44370 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44369 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44368 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44367 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44365 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44364 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44363 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44362 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44361 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44360 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44359 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-44358 | High | 7.7 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HT… |
CVE-2021-23760 | Medium | 5.6 | 2022-01-28 | The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to cause a denial of servic… |
CVE-2021-23558 | High | 7.3 | 2022-01-28 | The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an… |
CVE-2021-23484 | Critical | 9.8 | 2022-01-28 | The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file o… |
CVE-2021-4034 | High | 7.8 | 2022-01-28 | A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users t… |
CVE-2021-44463 | High | 8.1 | 2022-01-28 | Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and… |
CVE-2021-40423 | High | 7.5 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted ser… |
CVE-2021-40419 | High | 7.5 | 2022-01-28 | A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted series of network requests can lead… |
CVE-2021-40416 | High | 8.8 | 2022-01-28 | An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. All the Get… |
CVE-2021-40415 | Medium | 6.5 | 2022-01-28 | An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. In cgi_check… |
CVE-2021-40414 | High | 7.1 | 2022-01-28 | An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. The SetMdAla… |
CVE-2021-40413 | High | 7.1 | 2022-01-28 | An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. The UpgradeP… |
CVE-2021-40412 | High | 7.2 | 2022-01-28 | An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [8] the devname variable… |
CVE-2021-40411 | High | 7.2 | 2022-01-28 | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [6] the dns_data->dns2 va… |
CVE-2021-40410 | High | 7.2 | 2022-01-28 | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] the dns_data->dns1 va… |
CVE-2021-40409 | Critical | 9.8 | 2022-01-28 | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS… |
CVE-2021-40408 | Critical | 9.8 | 2022-01-28 | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS… |
CVE-2021-40407 | High | 7.2 | 2022-01-28 | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS… |
CVE-2021-40406 | High | 7.5 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP… |
CVE-2021-40404 | Medium | 6.5 | 2022-01-28 | An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP reques… |
CVE-2021-40397 | High | 7.8 | 2022-01-28 | A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-crafted file can be replaced in the system… |
CVE-2021-40396 | High | 8.8 | 2022-01-28 | A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to… |
CVE-2021-40389 | High | 8.8 | 2022-01-28 | A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the syste… |
CVE-2021-40388 | High | 8.8 | 2022-01-28 | A privilege escalation vulnerability exists in Advantech SQ Manager Server 1.0.6. A specially-crafted file can be replaced in the system to escalate privileges… |
CVE-2021-40340 | Low | 3.7 | 2022-01-28 | Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a misconfiguration in the ASP server exposes server and ASP.net information, a… |
CVE-2021-40339 | Low | 3.7 | 2022-01-28 | Configuration vulnerability in Hitachi Energy LinkOne application due to the lack of HTTP Headers, allows an attacker that manages to exploit this vulnerabilit… |
CVE-2021-40338 | Low | 3.7 | 2022-01-28 | Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem d… |
CVE-2021-31567 | Medium | 6.8 | 2022-01-28 | Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6). The plugin allows arbitrary f… |
CVE-2021-27654 | High | 7.8 | 2022-01-28 | Forgotten password reset functionality for local accounts can be used to bypass local authentication checks. |
CVE-2021-26264 | Medium | 6.1 | 2022-01-28 | A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition. |
CVE-2021-23863 | Medium | 6.1 | 2022-01-28 | HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successfully exploited allows an attacker to in… |
CVE-2021-23174 | Low | 3.4 | 2022-01-28 | Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable param… |
CVE-2021-22827 | High | 8.8 | 2022-01-28 | A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload… |
CVE-2021-22826 | High | 8.8 | 2022-01-28 | A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload… |
CVE-2021-22825 | High | 8.0 | 2022-01-28 | A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the system with elevated priv… |
CVE-2021-22822 | Medium | 6.1 | 2022-01-28 | A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate… |
CVE-2021-22821 | High | 8.6 | 2022-01-28 | A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets whe… |
CVE-2021-22820 | Critical | 9.8 | 2022-01-28 | A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the c… |
CVE-2021-22819 | Medium | 4.3 | 2022-01-28 | A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user… |
CVE-2021-22818 | High | 7.5 | 2022-01-28 | A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the chargi… |
CVE-2021-22816 | High | 7.5 | 2022-01-28 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially… |
CVE-2021-22815 | Medium | 5.3 | 2022-01-28 | A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affected Products: 1-Phase Uninterruptible P… |
CVE-2021-22814 | Medium | 6.1 | 2022-01-28 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists which could cause arbritrary script executi… |
CVE-2021-22813 | Medium | 6.1 | 2022-01-28 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script executio… |
CVE-2021-22812 | Medium | 6.1 | 2022-01-28 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script executio… |
CVE-2021-22811 | Medium | 6.1 | 2022-01-28 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the… |
CVE-2021-22810 | Medium | 6.1 | 2022-01-28 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script executio… |
CVE-2021-22809 | Medium | 5.5 | 2022-01-28 | A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIc… |
CVE-2021-22808 | High | 7.8 | 2022-01-28 | A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon to… |
CVE-2021-22807 | High | 7.8 | 2022-01-28 | A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIc… |
CVE-2021-22799 | Low | 3.8 | 2022-01-28 | A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker ma… |
CVE-2021-22725 | High | 8.8 | 2022-01-28 | A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when… |
CVE-2021-22724 | High | 8.8 | 2022-01-28 | A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when… |
CVE-2021-44971 | Critical | 9.8 | 2022-01-28 | Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an at… |
CVE-2021-41609 | Critical | 9.8 | 2022-01-28 | SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to r… |
CVE-2021-41608 | High | 7.5 | 2022-01-28 | A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to ret… |
CVE-2021-45899 | Critical | 9.8 | 2022-01-28 | SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution. |
CVE-2021-45898 | Critical | 9.8 | 2022-01-28 | SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion. |
CVE-2021-45897 | High | 8.8 | 2022-01-28 | SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution. |
CVE-2021-34073 | Medium | 5.4 | 2022-01-28 | A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add f… |
CVE-2021-45435 | Critical | 9.8 | 2022-01-28 | An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php. |
CVE-2021-44249 | Critical | 9.8 | 2022-01-28 | Online Motorcycle (Bike) Rental System 1.0 is vulnerable to a Blind Time-Based SQL Injection attack within the login portal. This can lead attackers to remotel… |
CVE-2021-42791 | High | 7.3 | 2022-01-28 | An issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push notifications for VeridiumAD enrolled users does not enforce proper… |
CVE-2021-46556 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_bcode_insert_offset at src/mjs_bcode.c. This vulnerability can lead to a Denial of S… |
CVE-2021-46554 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src/mjs_json.c. This vulnerability can lead to a Denial of Service… |
CVE-2021-46553 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c. This vulnerability can lead to a Denial of Service… |
CVE-2021-46550 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerability can lead to a Denial of Service (D… |
CVE-2021-46549 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (Do… |
CVE-2021-46548 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mjs_bcode.c. This vulnerability can lead to a Denial of Servi… |
CVE-2021-46547 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46546 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_next at src/mjs_object.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46545 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x4b44b. This vulnerability can lead to a Denial of Serv… |