2021 CVEs (page 78)
Page 78 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38937 | Medium | 6.5 | 2021-12-10 | IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call… |
CVE-2021-38917 | Critical | 9.1 | 2021-12-10 | IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory thr… |
CVE-2021-31746 | Critical | 9.8 | 2021-12-10 | Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arb… |
CVE-2021-31745 | High | 7.5 | 2021-12-10 | Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access to the platform. Because Pluck does not… |
CVE-2021-37935 | High | 7.5 | 2021-12-10 | An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user to get information a… |
CVE-2021-37934 | Critical | 9.8 | 2021-12-10 | Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterprise before 3.10.14 could allow an unauthe… |
CVE-2021-36911 | Medium | 4.8 | 2021-12-10 | Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Comment Engine Pro plugin (versions <= 1.0), could be exploited by users with Editor or… |
CVE-2021-29214 | High | 7.2 | 2021-12-10 | A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to… |
CVE-2021-3829 | Medium | 6.1 | 2021-12-10 | openwhyd is vulnerable to URL Redirection to Untrusted Site |
CVE-2021-40834 | Medium | 4.3 | 2021-12-10 | A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAF… |
CVE-2021-37189 | High | 7.5 | 2021-12-10 | An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which… |
CVE-2021-37188 | High | 8.8 | 2021-12-10 | An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not v… |
CVE-2021-37187 | Medium | 6.5 | 2021-12-10 | An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the d… |
CVE-2021-35978 | Critical | 9.8 | 2021-12-10 | An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allo… |
CVE-2021-4084 | Medium | 6.1 | 2021-12-10 | pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-4082 | Medium | 4.3 | 2021-12-10 | pimcore is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-4081 | Medium | 6.1 | 2021-12-10 | pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-44228 | Critical | 10.0 | 2021-12-10 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter… |
CVE-2021-43803 | High | 7.5 | 2021-12-10 | Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected… |
CVE-2021-43802 | Critical | 9.9 | 2021-12-09 | Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file that, when imported, might allow the atta… |
CVE-2021-43982 | High | 7.8 | 2021-12-09 | Delta Electronics CNCSoft Versions 1.01.30 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. |
CVE-2021-37861 | Medium | 5.8 | 2021-12-09 | Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails. |
CVE-2021-4033 | Medium | 6.5 | 2021-12-09 | kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-44514 | Critical | 9.8 | 2021-12-09 | OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories. |
CVE-2021-43608 | Critical | 9.8 | 2021-12-09 | Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an i… |
CVE-2021-43797 | Medium | 6.5 | 2021-12-09 | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty pr… |
CVE-2021-43703 | Critical | 9.8 | 2021-12-09 | An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the adm… |
CVE-2021-41265 | High | 8.1 | 2021-12-09 | Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulnerability in the REST API. The… |
CVE-2021-40282 | High | 8.8 | 2021-12-09 | An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php. when registering ordinary users. |
CVE-2021-40281 | High | 8.8 | 2021-12-09 | An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary users. |
CVE-2021-39002 | High | 7.5 | 2021-12-09 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could… |
CVE-2021-38951 | High | 7.5 | 2021-12-09 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker… |
CVE-2021-38931 | Medium | 6.5 | 2021-12-09 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user hav… |
CVE-2021-38926 | Medium | 5.5 | 2021-12-09 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing m… |
CVE-2021-29678 | High | 8.7 | 2021-12-09 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other datab… |
CVE-2021-22568 | High | 8.8 | 2021-12-09 | When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token th… |
CVE-2021-20373 | High | 7.5 | 2021-12-09 | IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD util… |
CVE-2021-4038 | Medium | 4.8 | 2021-12-09 | Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a… |
CVE-2021-41697 | Medium | 6.1 | 2021-12-09 | A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php… |
CVE-2021-41696 | Medium | 6.5 | 2021-12-09 | An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php. |
CVE-2021-41695 | Critical | 9.8 | 2021-12-09 | An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. . |
CVE-2021-41694 | Critical | 9.8 | 2021-12-09 | An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php. |
CVE-2021-41246 | Medium | 4.6 | 2021-12-09 | Express OpenID Connect is express JS middleware implementing sign on for Express web apps using OpenID Connect. Versions before and including `2.5.1` do not re… |
CVE-2021-40280 | High | 7.2 | 2021-12-09 | An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php. |
CVE-2021-40279 | High | 7.2 | 2021-12-09 | An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php. |
CVE-2021-21955 | High | 7.5 | 2021-12-09 | An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Gen… |
CVE-2021-21954 | Critical | 9.9 | 2021-12-09 | A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A special… |
CVE-2021-20146 | Critical | 9.8 | 2021-12-09 | An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and i… |
CVE-2021-20145 | High | 7.5 | 2021-12-09 | Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN network which exposes the… |
CVE-2021-20144 | High | 8.8 | 2021-12-09 | An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server service on Gryphon Tower routers. An unaut… |
CVE-2021-20143 | High | 8.8 | 2021-12-09 | An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server service on Gryphon Tower routers. An unaut… |
CVE-2021-20142 | High | 8.8 | 2021-12-09 | An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server service on Gryphon Tower routers. An unaut… |
CVE-2021-20141 | High | 8.8 | 2021-12-09 | An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server service on Gryphon Tower routers. An unaut… |
CVE-2021-20140 | High | 8.8 | 2021-12-09 | An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller_server service on Gryphon Tower routers. An unaut… |
CVE-2021-20139 | High | 8.8 | 2021-12-09 | An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Tower routers. An unauth… |
CVE-2021-20138 | High | 8.8 | 2021-12-09 | An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenti… |
CVE-2021-20137 | Medium | 6.1 | 2021-12-09 | A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface… |
CVE-2021-41449 | High | 7.1 | 2021-12-09 | A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access… |
CVE-2021-22565 | Medium | 6.5 | 2021-12-09 | An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposur… |
CVE-2021-3817 | Critical | 9.8 | 2021-12-09 | wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command |
CVE-2021-43071 | High | 8.8 | 2021-12-09 | A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unautho… |
CVE-2021-43068 | Medium | 5.4 | 2021-12-09 | A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal. |
CVE-2021-43065 | High | 7.8 | 2021-12-09 | A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to… |
CVE-2021-42759 | Medium | 6.7 | 2021-12-09 | A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or co… |
CVE-2021-36167 | Medium | 4.3 | 2021-12-09 | An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated at… |
CVE-2021-43410 | Medium | 5.3 | 2021-12-09 | Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged with… |
CVE-2021-43204 | Medium | 4.4 | 2021-12-09 | A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below… |
CVE-2021-36194 | High | 8.8 | 2021-12-09 | Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve… |
CVE-2021-36189 | Medium | 6.8 | 2021-12-09 | A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure vi… |
CVE-2021-43811 | High | 7.8 | 2021-12-08 | Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurati… |
CVE-2021-4048 | Critical | 9.1 | 2021-12-08 | An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before vers… |
CVE-2021-44529 | Critical | 9.8 | 2021-12-08 | A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissio… |
CVE-2021-43546 | Medium | 4.3 | 2021-12-08 | It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefo… |
CVE-2021-43545 | Medium | 6.5 | 2021-12-08 | Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0… |
CVE-2021-43544 | Medium | 6.1 | 2021-12-08 | When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to loa… |
CVE-2021-43543 | Medium | 6.1 | 2021-12-08 | Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects… |
CVE-2021-43542 | Medium | 6.5 | 2021-12-08 | Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability aff… |
CVE-2021-43541 | Medium | 6.5 | 2021-12-08 | When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunder… |
CVE-2021-43540 | Medium | 6.5 | 2021-12-08 | WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with th… |
CVE-2021-43539 | High | 8.8 | 2021-12-08 | Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers… |
CVE-2021-43538 | Medium | 4.3 | 2021-12-08 | By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock… |
CVE-2021-43537 | High | 8.8 | 2021-12-08 | An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulne… |
CVE-2021-43536 | Medium | 6.5 | 2021-12-08 | Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird <… |
CVE-2021-43535 | High | 8.8 | 2021-12-08 | A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable… |
CVE-2021-43534 | High | 8.8 | 2021-12-08 | Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence of memory c… |
CVE-2021-43533 | Medium | 4.3 | 2021-12-08 | When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to u… |
CVE-2021-43532 | Medium | 6.1 | 2021-12-08 | The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjun… |
CVE-2021-43531 | Medium | 4.3 | 2021-12-08 | When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the… |
CVE-2021-43530 | Medium | 6.1 | 2021-12-08 | A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug o… |
CVE-2021-43528 | Medium | 6.5 | 2021-12-08 | Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level… |
CVE-2021-43527 | Critical | 9.8 | 2021-12-08 | NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. App… |
CVE-2021-38510 | High | 8.8 | 2021-12-08 | The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.*Note: Thi… |
CVE-2021-38509 | Medium | 4.3 | 2021-12-08 | Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be displayed over top a… |
CVE-2021-38508 | Medium | 4.3 | 2021-12-08 | By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could hav… |
CVE-2021-38507 | Medium | 6.5 | 2021-12-08 | The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HT… |
CVE-2021-38506 | Medium | 4.3 | 2021-12-08 | Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on… |
CVE-2021-38505 | Medium | 6.5 | 2021-12-08 | Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it… |
CVE-2021-38504 | High | 8.8 | 2021-12-08 | When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption a… |
CVE-2021-38503 | Critical | 10.0 | 2021-12-08 | The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the… |
CVE-2021-37941 | High | 7.8 | 2021-12-08 | A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with t… |