2021 CVEs (page 54)
Page 54 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46544 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x59e19. This vulnerability can lead to a Denial… |
CVE-2021-46543 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e810. This vulnerability can lead to a Denial of Ser… |
CVE-2021-46542 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_print at src/mjs_builtin.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46541 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46540 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_get_mjs at src/mjs_builtin.c. This vulnerability can lead to a Denial of Service (Do… |
CVE-2021-46539 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x45a1f. This vulnerability can lead to a Denial of Serv… |
CVE-2021-46538 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_compact_strings at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (… |
CVE-2021-46537 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46535 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0xe533e. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46534 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getprop_builtin_foreign at src/mjs_exec.c. This vulnerability can lead to a Denial of Se… |
CVE-2021-46532 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via exec_expr at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46531 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46530 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_execute at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46529 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46528 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46527 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c. |
CVE-2021-46526 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c. |
CVE-2021-46525 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c. |
CVE-2021-46524 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c. |
CVE-2021-46523 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c. |
CVE-2021-46522 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53. |
CVE-2021-46521 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c. |
CVE-2021-46520 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c. |
CVE-2021-46519 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c. |
CVE-2021-46518 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c. |
CVE-2021-46517 | Medium | 5.5 | 2022-01-27 | There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0. |
CVE-2021-46516 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_stack_size at mjs/src/mjs_core.c. This vulnerability can lead to a Denial of Service… |
CVE-2021-46515 | Medium | 5.5 | 2022-01-27 | There is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in Cesanta MJS v2.20.0. |
CVE-2021-46514 | Medium | 5.5 | 2022-01-27 | There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0. |
CVE-2021-46513 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs/src/mjs_string.c. |
CVE-2021-46512 | Medium | 5.5 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_apply at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46511 | Medium | 5.5 | 2022-01-27 | There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0. |
CVE-2021-46510 | Medium | 5.5 | 2022-01-27 | There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0. |
CVE-2021-46509 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c. |
CVE-2021-46508 | Medium | 5.5 | 2022-01-27 | There is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0. |
CVE-2021-46507 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a stack overflow via Jsi_LogMsg at src/jsiUtils.c. |
CVE-2021-46506 | Medium | 5.5 | 2022-01-27 | There is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0. |
CVE-2021-46505 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5. |
CVE-2021-46504 | Medium | 5.5 | 2022-01-27 | There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0. |
CVE-2021-46503 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Ser… |
CVE-2021-46502 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5166d. This vulnerability can lead to a Denial of Ser… |
CVE-2021-46501 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46500 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46499 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46498 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_wswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Servi… |
CVE-2021-46497 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_UserObjDelete in src/jsiUserObj.c. This vulnerability can lead to a Denial of Service (DoS… |
CVE-2021-46496 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_ObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46495 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46494 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueLookupBase in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS… |
CVE-2021-46492 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_FunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46491 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_CommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46490 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46489 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_DecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46488 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi_ArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46487 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service (D… |
CVE-2021-46486 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi_ArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46485 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_ValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46484 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_IncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46428 | Critical | 9.8 | 2022-01-27 | A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 ( and previous versions via the bot_avatar parameter in Sys… |
CVE-2021-46427 | Critical | 9.8 | 2022-01-27 | An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php. |
CVE-2021-46377 | Critical | 9.8 | 2022-01-27 | There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser |
CVE-2021-46102 | High | 7.5 | 2022-01-27 | From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly… |
CVE-2021-46097 | High | 8.8 | 2022-01-27 | Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log |
CVE-2021-46088 | High | 7.2 | 2022-01-27 | Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on… |
CVE-2021-46065 | Medium | 4.8 | 2022-01-27 | A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitr… |
CVE-2021-28096 | Medium | 5.3 | 2022-01-27 | An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the… |
CVE-2021-44795 | Medium | 5.3 | 2022-01-27 | Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module. A remote attacker could exploit this vulnerability to… |
CVE-2021-44794 | Medium | 5.3 | 2022-01-27 | Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulnerability to access t… |
CVE-2021-44793 | High | 8.6 | 2022-01-27 | Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the d… |
CVE-2021-44792 | Medium | 5.3 | 2022-01-27 | Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the lo… |
CVE-2021-41166 | Medium | 4.3 | 2022-01-26 | The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive… |
CVE-2021-32849 | High | 8.8 | 2022-01-26 | Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in ve… |
CVE-2021-32841 | Medium | 4.0 | 2022-01-26 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is… |
CVE-2021-32842 | Medium | 4.0 | 2022-01-26 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the destination file is… |
CVE-2021-32840 | High | 7.3 | 2022-01-26 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory… |
CVE-2021-46385 | High | 7.5 | 2022-01-26 | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsof… |
CVE-2021-46114 | High | 8.8 | 2022-01-26 | jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides a function through which attackers can… |
CVE-2021-46561 | High | 7.2 | 2022-01-26 | controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrato… |
CVE-2021-29846 | Low | 2.7 | 2022-01-26 | IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 20… |
CVE-2021-29845 | High | 8.8 | 2022-01-26 | IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper input validation. IBM X-Force ID: 205255. |
CVE-2021-29838 | Medium | 5.9 | 2022-01-26 | IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transpor… |
CVE-2021-46386 | Critical | 9.8 | 2022-01-26 | File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.a… |
CVE-2021-46383 | High | 7.5 | 2022-01-26 | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsof… |
CVE-2021-46118 | High | 7.2 | 2022-01-26 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The admin panel provides a function through… |
CVE-2021-46116 | High | 7.2 | 2022-01-26 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController#doInstall. The admin panel provides a function through which at… |
CVE-2021-46115 | High | 7.2 | 2022-01-26 | jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a function through which attackers can upl… |
CVE-2021-46117 | High | 7.2 | 2022-01-26 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which atta… |
CVE-2021-44692 | Medium | 5.3 | 2022-01-26 | BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their… |
CVE-2021-43334 | Medium | 5.4 | 2022-01-26 | BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field. |
CVE-2021-45975 | High | 7.8 | 2022-01-26 | In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a D… |
CVE-2021-22600 | Medium | 6.6 | 2022-01-26 | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny servi… |
CVE-2021-22570 | Medium | 6.5 | 2022-01-26 | Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name du… |
CVE-2021-44123 | High | 8.8 | 2022-01-26 | SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft a malicious picture with a double exte… |
CVE-2021-44122 | High | 8.8 | 2022-01-26 | SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/public/balises.php, ecrire/balise/formulaire… |
CVE-2021-44120 | Medium | 5.4 | 2022-01-26 | SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the function safehtml to the vulnerable fields. An… |
CVE-2021-44118 | Medium | 5.4 | 2022-01-26 | SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerab… |
CVE-2021-41766 | High | 8.1 | 2022-01-26 | Apache Karaf allows monitoring of applications and the Java runtime by using the Java Management Extensions (JMX). JMX is a Java RMI based technology that reli… |
CVE-2021-46560 | Critical | 9.8 | 2022-01-26 | The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage. |
CVE-2021-46559 | High | 7.5 | 2022-01-26 | The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection. |
CVE-2021-36348 | High | 8.1 | 2022-01-25 | iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit… |