2021 CVEs (page 64)
Page 64 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25020 | Medium | 4.9 | 2022-01-03 | The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, allowing high privilege users to use a pa… |
CVE-2021-25016 | Medium | 6.1 | 2022-01-03 | The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back i… |
CVE-2021-25001 | Medium | 6.1 | 2022-01-03 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_result parameter before outputting back in t… |
CVE-2021-25000 | Medium | 6.1 | 2022-01-03 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter before outputting back in the admin dashbo… |
CVE-2021-24999 | Medium | 6.1 | 2022-01-03 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before outputting it back in the admin dashboar… |
CVE-2021-24991 | Medium | 4.8 | 2022-01-03 | The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attr… |
CVE-2021-24973 | Medium | 6.1 | 2022-01-03 | The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenti… |
CVE-2021-24964 | Medium | 6.1 | 2022-01-03 | The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make request… |
CVE-2021-24963 | Medium | 4.8 | 2022-01-03 | The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the JS code of an admin page, leading to a… |
CVE-2021-24893 | High | 7.5 | 2022-01-03 | The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the… |
CVE-2021-24831 | High | 7.5 | 2022-01-03 | All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to… |
CVE-2021-24828 | Medium | 5.4 | 2022-01-03 | The Mortgage Calculator / Loan Calculator WordPress plugin before 1.5.17 does not escape the some of the attributes of its mlcalc shortcode before outputting t… |
CVE-2021-24786 | High | 7.2 | 2022-01-03 | The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when vi… |
CVE-2021-24680 | Medium | 5.4 | 2022-01-03 | The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activities/Trip Type and Pricing Category page… |
CVE-2021-45917 | High | 8.0 | 2022-01-03 | The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within th… |
CVE-2021-45916 | Low | 3.5 | 2022-01-03 | The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send m… |
CVE-2021-44158 | High | 8.0 | 2022-01-03 | ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area netw… |
CVE-2021-35093 | Medium | 6.5 | 2022-01-03 | Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCore |
CVE-2021-30351 | Critical | 9.8 | 2022-01-03 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Comput… |
CVE-2021-30348 | Medium | 6.5 | 2022-01-03 | Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2021-30337 | High | 8.4 | 2022-01-03 | Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2021-30336 | High | 8.4 | 2022-01-03 | Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30335 | High | 8.4 | 2022-01-03 | Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Com… |
CVE-2021-30303 | High | 7.8 | 2022-01-03 | Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2021-30298 | Medium | 6.7 | 2022-01-03 | Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Au… |
CVE-2021-30293 | High | 7.5 | 2022-01-03 | Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-30289 | High | 7.8 | 2022-01-03 | Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2021-30283 | High | 7.1 | 2022-01-03 | Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr… |
CVE-2021-30282 | High | 8.4 | 2022-01-03 | Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2021-30279 | High | 7.8 | 2022-01-03 | Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30278 | High | 7.1 | 2022-01-03 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-30276 | Critical | 9.3 | 2022-01-03 | Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Con… |
CVE-2021-30275 | Critical | 9.3 | 2022-01-03 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2021-30274 | High | 8.4 | 2022-01-03 | Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2021-30273 | High | 7.5 | 2022-01-03 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30272 | High | 7.3 | 2022-01-03 | Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2021-30271 | High | 7.3 | 2022-01-03 | Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2021-30270 | High | 7.3 | 2022-01-03 | Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Com… |
CVE-2021-30269 | High | 7.3 | 2022-01-03 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2021-30268 | High | 7.8 | 2022-01-03 | Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2021-30267 | High | 7.8 | 2022-01-03 | Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2021-30262 | High | 8.4 | 2022-01-03 | Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-1918 | Medium | 6.5 | 2022-01-03 | Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2021-1894 | High | 7.1 | 2022-01-03 | Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2021-25994 | High | 8.8 | 2022-01-03 | In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated… |
CVE-2021-25981 | Critical | 9.8 | 2022-01-03 | In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration… |
CVE-2021-36751 | Medium | 4.2 | 2022-01-02 | ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (without knowledge of the key). This is c… |
CVE-2021-44896 | Medium | 6.1 | 2022-01-01 | DMP Roadmap before 3.0.4 allows XSS. |
CVE-2021-45972 | High | 7.1 | 2022-01-01 | The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. T… |
CVE-2021-45960 | High | 8.8 | 2022-01-01 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., alloca… |
CVE-2021-44852 | High | 7.8 | 2022-01-01 | An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs t… |
CVE-2021-43333 | Medium | 6.5 | 2022-01-01 | The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or disclosure of configuration settings. |
CVE-2021-41819 | High | 7.5 | 2022-01-01 | CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby. |
CVE-2021-44717 | Medium | 4.8 | 2022-01-01 | Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous… |
CVE-2021-44716 | High | 7.5 | 2022-01-01 | net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests. |
CVE-2021-41817 | High | 7.5 | 2022-01-01 | Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3… |
CVE-2021-45943 | Medium | 5.5 | 2022-01-01 | GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CP… |
CVE-2021-45942 | Medium | 5.5 | 2022-01-01 | OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask… |
CVE-2021-45941 | Medium | 6.5 | 2022-01-01 | libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). |
CVE-2021-45940 | Medium | 6.5 | 2022-01-01 | libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). |
CVE-2021-45939 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Subscribe). |
CVE-2021-45938 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Unsubscribe). |
CVE-2021-45937 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect). |
CVE-2021-45936 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType). |
CVE-2021-45935 | Medium | 5.5 | 2022-01-01 | Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1Decompres… |
CVE-2021-45934 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType). |
CVE-2021-45933 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). |
CVE-2021-45932 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). |
CVE-2021-45931 | Medium | 6.5 | 2022-01-01 | HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy). |
CVE-2021-45930 | Medium | 5.5 | 2022-01-01 | Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called f… |
CVE-2021-45928 | Medium | 5.5 | 2022-01-01 | libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl… |
CVE-2021-45927 | High | 7.8 | 2022-01-01 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt… |
CVE-2021-45926 | High | 7.8 | 2022-01-01 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt… |
CVE-2021-45958 | Medium | 5.5 | 2022-01-01 | UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use… |
CVE-2021-45957 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-… |
CVE-2021-45956 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through… |
CVE-2021-45955 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check u… |
CVE-2021-45954 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 throug… |
CVE-2021-45953 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951… |
CVE-2021-45952 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through… |
CVE-2021-45951 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the vendor's pos… |
CVE-2021-45950 | Medium | 6.5 | 2022-01-01 | LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object). |
CVE-2021-45949 | Medium | 5.5 | 2022-01-01 | Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). |
CVE-2021-45948 | Medium | 5.5 | 2022-01-01 | Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrappe… |
CVE-2021-45947 | Medium | 5.5 | 2022-01-01 | Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release (called from EvaluateExpression and InitDataSegments). |
CVE-2021-45946 | Medium | 5.5 | 2022-01-01 | Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile_LoopOrBlock and CompileBlockStatements). |
CVE-2021-45944 | Medium | 5.5 | 2022-01-01 | Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). |
CVE-2021-45929 | Medium | 5.5 | 2022-01-01 | Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and Compile_If). |
CVE-2021-4193 | Medium | 5.5 | 2021-12-31 | vim is vulnerable to Out-of-bounds Read |
CVE-2021-4192 | High | 7.8 | 2021-12-31 | vim is vulnerable to Use After Free |
CVE-2021-4190 | High | 7.5 | 2021-12-30 | Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file |
CVE-2021-4186 | Medium | 6.3 | 2021-12-30 | Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file |
CVE-2021-4185 | High | 7.5 | 2021-12-30 | Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file |
CVE-2021-4184 | High | 7.5 | 2021-12-30 | Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file |
CVE-2021-4183 | Medium | 5.5 | 2021-12-30 | Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file |
CVE-2021-4182 | High | 7.5 | 2021-12-30 | Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file |
CVE-2021-4181 | High | 7.5 | 2021-12-30 | Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file |
CVE-2021-45732 | High | 8.8 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate confi… |
CVE-2021-45077 | High | 7.5 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are store… |
CVE-2021-44466 | High | 7.3 | 2021-12-30 | Bitmask Riseup VPN 0.21.6 contains a local privilege escalation flaw due to improper access controls. When the software is installed with a non-default install… |