2021 CVEs (page 80)
Page 80 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41311 | High | 7.5 | 2021-12-08 | Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify pr… |
CVE-2021-41309 | Medium | 5.3 | 2021-12-08 | Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of anothe… |
CVE-2021-3370 | Medium | 6.1 | 2021-12-08 | DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php. |
CVE-2021-44420 | High | 7.3 | 2021-12-08 | In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based… |
CVE-2021-43808 | Medium | 5.3 | 2021-12-08 | Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in th… |
CVE-2021-44148 | Medium | 6.1 | 2021-12-07 | GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS pay… |
CVE-2021-43963 | High | 8.1 | 2021-12-07 | An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely b… |
CVE-2021-43810 | High | 8.8 | 2021-12-07 | Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior… |
CVE-2021-42717 | High | 7.5 | 2021-12-07 | ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web serv… |
CVE-2021-42567 | Medium | 6.1 | 2021-12-07 | Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints. |
CVE-2021-40578 | High | 7.2 | 2021-12-07 | Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, tha… |
CVE-2021-44149 | High | 7.8 | 2021-12-07 | An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configu… |
CVE-2021-42688 | High | 8.8 | 2021-12-07 | An Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B in the Accops HyWorks Windows Client… |
CVE-2021-42687 | High | 8.8 | 2021-12-07 | A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbi… |
CVE-2021-42686 | High | 8.8 | 2021-12-07 | An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3… |
CVE-2021-42685 | High | 8.8 | 2021-12-07 | An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks DVM Tools prior to… |
CVE-2021-42683 | High | 8.8 | 2021-12-07 | A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbi… |
CVE-2021-42682 | High | 8.8 | 2021-12-07 | An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrar… |
CVE-2021-42681 | High | 8.8 | 2021-12-07 | A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary… |
CVE-2021-38759 | Critical | 9.8 | 2021-12-07 | Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. |
CVE-2021-36760 | Medium | 6.1 | 2021-12-07 | In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter… |
CVE-2021-36133 | High | 7.1 | 2021-12-07 | The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure Wo… |
CVE-2021-34544 | Medium | 6.5 | 2021-12-07 | An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may… |
CVE-2021-34543 | High | 7.5 | 2021-12-07 | The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative priv… |
CVE-2021-28680 | High | 8.1 | 2021-12-07 | The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquera… |
CVE-2021-43638 | High | 8.8 | 2021-12-07 | Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers t… |
CVE-2021-43637 | High | 8.8 | 2021-12-07 | Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execut… |
CVE-2021-43006 | High | 8.8 | 2021-12-07 | AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attacker… |
CVE-2021-43003 | High | 8.8 | 2021-12-07 | Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local att… |
CVE-2021-43002 | High | 8.8 | 2021-12-07 | Amzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to exec… |
CVE-2021-43000 | High | 8.8 | 2021-12-07 | Amzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local atta… |
CVE-2021-42996 | High | 8.8 | 2021-12-07 | Donglify is affected by Integer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary cod… |
CVE-2021-42994 | High | 8.8 | 2021-12-07 | Donglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code… |
CVE-2021-42993 | High | 8.8 | 2021-12-07 | FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers t… |
CVE-2021-42990 | High | 8.8 | 2021-12-07 | FlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allows local attackers t… |
CVE-2021-42988 | High | 8.8 | 2021-12-07 | Eltima USB Network Gate is affected by Buffer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to e… |
CVE-2021-42987 | High | 8.8 | 2021-12-07 | Eltima USB Network Gate is affected by Integer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to… |
CVE-2021-42986 | High | 8.8 | 2021-12-07 | NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow loca… |
CVE-2021-42983 | High | 8.8 | 2021-12-07 | NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local… |
CVE-2021-42980 | High | 8.8 | 2021-12-07 | NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers… |
CVE-2021-42979 | High | 8.8 | 2021-12-07 | NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attacker… |
CVE-2021-42977 | High | 8.8 | 2021-12-07 | NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow lo… |
CVE-2021-42976 | High | 8.8 | 2021-12-07 | NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow loc… |
CVE-2021-42973 | High | 8.8 | 2021-12-07 | NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute… |
CVE-2021-42972 | High | 8.8 | 2021-12-07 | NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute… |
CVE-2021-40288 | High | 7.5 | 2021-12-07 | A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker to disconn… |
CVE-2021-43798 | High | 7.5 | 2021-12-07 | Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to… |
CVE-2021-41716 | Critical | 9.8 | 2021-12-07 | Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in… |
CVE-2021-40859 | Critical | 9.8 | 2021-12-07 | Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full admin… |
CVE-2021-37940 | Medium | 6.8 | 2021-12-07 | An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integrati… |
CVE-2021-24041 | Critical | 9.8 | 2021-12-07 | A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-o… |
CVE-2021-43805 | High | 7.5 | 2021-12-07 | Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability… |
CVE-2021-43176 | High | 8.8 | 2021-12-07 | The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and… |
CVE-2021-43175 | High | 7.5 | 2021-12-07 | The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action that routes to other… |
CVE-2021-43789 | High | 7.5 | 2021-12-07 | PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters wit… |
CVE-2021-37100 | High | 7.5 | 2021-12-07 | There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed. |
CVE-2021-37099 | Critical | 9.1 | 2021-12-07 | There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file. |
CVE-2021-37096 | High | 7.5 | 2021-12-07 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed. |
CVE-2021-37095 | Critical | 9.8 | 2021-12-07 | There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service… |
CVE-2021-37094 | High | 7.5 | 2021-12-07 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service. |
CVE-2021-37091 | High | 7.5 | 2021-12-07 | There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidential… |
CVE-2021-37090 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash. |
CVE-2021-37089 | High | 7.5 | 2021-12-07 | There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel restart. |
CVE-2021-37088 | Critical | 9.1 | 2021-12-07 | There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can write any content to any f… |
CVE-2021-37087 | Critical | 9.1 | 2021-12-07 | There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can create arbitrary file. |
CVE-2021-37086 | High | 8.6 | 2021-12-07 | There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which ca… |
CVE-2021-37085 | Medium | 5.9 | 2021-12-07 | There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service. |
CVE-2021-37084 | Critical | 9.8 | 2021-12-07 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other func… |
CVE-2021-37083 | High | 7.5 | 2021-12-07 | There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Denial of Service Attacks. |
CVE-2021-37082 | Medium | 5.9 | 2021-12-07 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash. |
CVE-2021-37081 | High | 7.5 | 2021-12-07 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash. |
CVE-2021-37080 | High | 7.5 | 2021-12-07 | There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected. |
CVE-2021-37079 | Critical | 9.1 | 2021-12-07 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete arbitrary file by syst… |
CVE-2021-37078 | High | 7.5 | 2021-12-07 | There is a Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote Denial of Service. |
CVE-2021-37077 | High | 7.5 | 2021-12-07 | There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crash. |
CVE-2021-37076 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected. |
CVE-2021-37073 | Low | 3.7 | 2021-12-07 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the detection result is tampered with. |
CVE-2021-37072 | High | 7.5 | 2021-12-07 | There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash. |
CVE-2021-37071 | High | 7.5 | 2021-12-07 | There is a Business Logic Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to persistent dos. |
CVE-2021-37070 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash. |
CVE-2021-37068 | High | 7.5 | 2021-12-07 | There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of Service Attacks. |
CVE-2021-37067 | High | 7.5 | 2021-12-07 | There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead… |
CVE-2021-37066 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash. |
CVE-2021-37065 | Critical | 9.1 | 2021-12-07 | There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Avail… |
CVE-2021-37064 | Critical | 9.1 | 2021-12-07 | There is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lea… |
CVE-2021-37063 | Critical | 9.8 | 2021-12-07 | There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony… |
CVE-2021-37062 | Critical | 9.1 | 2021-12-07 | There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory overflow and… |
CVE-2021-37061 | High | 7.5 | 2021-12-07 | There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection app… |
CVE-2021-37060 | High | 7.5 | 2021-12-07 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage. |
CVE-2021-37059 | Critical | 9.8 | 2021-12-07 | There is a Weaknesses Introduced During Design |
CVE-2021-37058 | Medium | 5.3 | 2021-12-07 | There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's n… |
CVE-2021-37057 | High | 7.5 | 2021-12-07 | There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to restart the phone. |
CVE-2021-37048 | High | 7.5 | 2021-12-07 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,p… |
CVE-2021-37043 | High | 7.5 | 2021-12-07 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application proce… |
CVE-2021-37021 | Critical | 9.1 | 2021-12-07 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read. |
CVE-2021-37020 | Critical | 9.1 | 2021-12-07 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read. |
CVE-2021-37014 | High | 7.5 | 2021-12-07 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to device cannot be used prope… |
CVE-2021-37011 | Critical | 9.1 | 2021-12-07 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read. |
CVE-2021-37056 | Medium | 5.3 | 2021-12-07 | There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain d… |
CVE-2021-37055 | Medium | 5.3 | 2021-12-07 | There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device informatio… |