2021 CVEs (page 73)
Page 73 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-4124 | Medium | 6.1 | 2021-12-16 | janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-40835 | Medium | 4.6 | 2021-12-16 | An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not car… |
CVE-2021-4123 | Medium | 6.5 | 2021-12-16 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-4121 | Medium | 6.1 | 2021-12-16 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-45102 | High | 8.8 | 2021-12-16 | An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. When authenticating to an HTCondor daemon using a SciToken, a user may be grante… |
CVE-2021-45101 | High | 8.1 | 2021-12-16 | An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access… |
CVE-2021-45100 | High | 7.5 | 2021-12-16 | The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This o… |
CVE-2021-45099 | High | 8.8 | 2021-12-16 | The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an attack surface that requires social enginee… |
CVE-2021-45098 | High | 7.5 | 2021-12-16 | An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options o… |
CVE-2021-45097 | Low | 2.9 | 2021-12-16 | KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file a… |
CVE-2021-45096 | Medium | 4.7 | 2021-12-16 | KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730. |
CVE-2021-45095 | Medium | 5.5 | 2021-12-16 | pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. |
CVE-2021-45092 | Critical | 9.8 | 2021-12-16 | Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. |
CVE-2021-45088 | Medium | 6.1 | 2021-12-16 | XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page. |
CVE-2021-45087 | Medium | 6.1 | 2021-12-16 | XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title. |
CVE-2021-45086 | Medium | 6.1 | 2021-12-16 | XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js. |
CVE-2021-45085 | Medium | 6.1 | 2021-12-16 | XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS… |
CVE-2021-44023 | High | 7.1 | 2021-12-16 | A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC… |
CVE-2021-43834 | Critical | 9.1 | 2021-12-16 | eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows an attacker to authenticate… |
CVE-2021-43833 | High | 8.1 | 2021-12-16 | eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows any authenticated user to ga… |
CVE-2021-45018 | Medium | 6.1 | 2021-12-15 | Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.htmland then the .html… |
CVE-2021-45017 | High | 8.8 | 2021-12-15 | Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that uses a google editor… |
CVE-2021-44350 | Critical | 9.8 | 2021-12-15 | SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php. |
CVE-2021-44116 | Medium | 6.1 | 2021-12-15 | Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containi… |
CVE-2021-4119 | Critical | 9.8 | 2021-12-15 | bookstack is vulnerable to Improper Access Control |
CVE-2021-45078 | High | 7.8 | 2021-12-15 | stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have uns… |
CVE-2021-43836 | High | 8.5 | 2021-12-15 | Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP… |
CVE-2021-43835 | High | 7.2 | 2021-12-15 | Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who have access to any subset of the admin… |
CVE-2021-43831 | High | 7.7 | 2021-12-15 | Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects… |
CVE-2021-43806 | High | 8.8 | 2021-12-15 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize proper… |
CVE-2021-43782 | Medium | 6.7 | 2021-12-15 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. This is a follow up to GHSA-887w-pv2r-x8pm/CVE-2021-… |
CVE-2021-41276 | Medium | 6.7 | 2021-12-15 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize proper… |
CVE-2021-35490 | Medium | 5.4 | 2021-12-15 | Thruk before 2.44 allows XSS for a quick command. |
CVE-2021-29847 | Medium | 5.9 | 2021-12-15 | BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure communication channe… |
CVE-2021-27859 | High | 8.8 | 2021-12-15 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 a… |
CVE-2021-27858 | Medium | 5.3 | 2021-12-15 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 a… |
CVE-2021-27857 | High | 7.5 | 2021-12-15 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 a… |
CVE-2021-27856 | Critical | 9.8 | 2021-12-15 | FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and… |
CVE-2021-27855 | High | 8.8 | 2021-12-15 | FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant… |
CVE-2021-43935 | High | 8.1 | 2021-12-15 | The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accep… |
CVE-2021-39657 | Medium | 4.4 | 2021-12-15 | In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2021-39656 | Medium | 6.7 | 2021-12-15 | In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel w… |
CVE-2021-39655 | Critical | 9.8 | 2021-12-15 | Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A |
CVE-2021-39653 | High | 7.8 | 2021-12-15 | In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of priv… |
CVE-2021-39652 | Medium | 6.7 | 2021-12-15 | In sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wit… |
CVE-2021-39651 | High | 7.8 | 2021-12-15 | In TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN confirmation due to a missing permission check. This could lead to local… |
CVE-2021-39650 | Medium | 6.7 | 2021-12-15 | In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2021-39649 | Medium | 6.7 | 2021-12-15 | In regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with Sys… |
CVE-2021-39648 | Medium | 4.1 | 2021-12-15 | In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information d… |
CVE-2021-39647 | Medium | 4.4 | 2021-12-15 | In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of TEE due to improper locking. This coul… |
CVE-2021-39646 | High | 7.5 | 2021-12-15 | Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A |
CVE-2021-39645 | Critical | 9.8 | 2021-12-15 | Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A |
CVE-2021-39644 | Critical | 9.8 | 2021-12-15 | Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A |
CVE-2021-39643 | Medium | 6.7 | 2021-12-15 | In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This… |
CVE-2021-39642 | Medium | 6.4 | 2021-12-15 | In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of priv… |
CVE-2021-39641 | Critical | 9.8 | 2021-12-15 | Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A |
CVE-2021-39640 | High | 7.8 | 2021-12-15 | In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no… |
CVE-2021-39639 | Medium | 6.8 | 2021-12-15 | In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to local escalation of privilege with physic… |
CVE-2021-39638 | Medium | 6.7 | 2021-12-15 | In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privile… |
CVE-2021-39637 | Medium | 4.4 | 2021-12-15 | In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local i… |
CVE-2021-39636 | Medium | 4.4 | 2021-12-15 | In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local inf… |
CVE-2021-36888 | Critical | 9.8 | 2021-12-15 | Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPr… |
CVE-2021-1048 | High | 7.8 | 2021-12-15 | In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with… |
CVE-2021-1047 | Medium | 4.4 | 2021-12-15 | In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosu… |
CVE-2021-1046 | Medium | 4.4 | 2021-12-15 | In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di… |
CVE-2021-1045 | High | 7.5 | 2021-12-15 | Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A |
CVE-2021-1044 | High | 7.8 | 2021-12-15 | In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a missing bounds check. This could lead t… |
CVE-2021-1043 | Medium | 5.5 | 2021-12-15 | In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to local information disclosure with no ad… |
CVE-2021-1042 | Medium | 4.4 | 2021-12-15 | In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local i… |
CVE-2021-1041 | Medium | 5.5 | 2021-12-15 | In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional executio… |
CVE-2021-1040 | High | 7.8 | 2021-12-15 | In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privi… |
CVE-2021-1039 | High | 7.8 | 2021-12-15 | In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privil… |
CVE-2021-1038 | Medium | 5.5 | 2021-12-15 | In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service with no a… |
CVE-2021-1034 | Low | 3.3 | 2021-12-15 | In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is installed, without querypermissions due to a m… |
CVE-2021-1032 | Low | 3.3 | 2021-12-15 | In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-1031 | Low | 3.3 | 2021-12-15 | In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissi… |
CVE-2021-1030 | Medium | 5.5 | 2021-12-15 | In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permis… |
CVE-2021-1029 | High | 7.8 | 2021-12-15 | In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2021-1028 | High | 7.8 | 2021-12-15 | In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2021-1027 | High | 7.8 | 2021-12-15 | In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. This could lead to local… |
CVE-2021-1026 | Medium | 5.5 | 2021-12-15 | In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform… |
CVE-2021-1025 | Medium | 5.5 | 2021-12-15 | In hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a mis… |
CVE-2021-1024 | Medium | 6.7 | 2021-12-15 | In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privil… |
CVE-2021-1023 | Medium | 5.0 | 2021-12-15 | In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed, without query permissions, due to side… |
CVE-2021-1022 | High | 7.5 | 2021-12-15 | In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denia… |
CVE-2021-1021 | High | 7.3 | 2021-12-15 | In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input valida… |
CVE-2021-1020 | High | 7.3 | 2021-12-15 | In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validati… |
CVE-2021-1019 | High | 7.3 | 2021-12-15 | In snoozeNotification of NotificationListenerService.java, there is a possible permission confusion due to a misleading user consent dialog. This could lead to… |
CVE-2021-1018 | Low | 3.3 | 2021-12-15 | In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel in… |
CVE-2021-1017 | High | 7.8 | 2021-12-15 | In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connection due to a missing permission check… |
CVE-2021-1016 | High | 7.3 | 2021-12-15 | In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay atta… |
CVE-2021-1015 | Low | 3.3 | 2021-12-15 | In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side chann… |
CVE-2021-1014 | Medium | 5.5 | 2021-12-15 | In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due… |
CVE-2021-1013 | Medium | 5.5 | 2021-12-15 | In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is inst… |
CVE-2021-1012 | Medium | 5.5 | 2021-12-15 | In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel… |
CVE-2021-1011 | Medium | 5.5 | 2021-12-15 | In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additiona… |
CVE-2021-1010 | Medium | 5.5 | 2021-12-15 | In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional exec… |
CVE-2021-1009 | Medium | 5.5 | 2021-12-15 | In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due t… |
CVE-2021-1008 | Medium | 4.4 | 2021-12-15 | In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could le… |
CVE-2021-1007 | Medium | 4.4 | 2021-12-15 | In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |