2021 CVEs (page 84)
Page 84 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24915 | Critical | 9.8 | 2021-11-29 | The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter… |
CVE-2021-24908 | Medium | 6.1 | 2021-11-29 | The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Sit… |
CVE-2021-24899 | Medium | 4.8 | 2021-11-29 | The Media-Tags WordPress plugin through 3.2.0.2 does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cros… |
CVE-2021-24889 | High | 7.2 | 2021-11-29 | The Ninja Forms Contact Form WordPress plugin before 3.6.4 does not escape keys of the fields POST parameter, which could allow high privilege users to perform… |
CVE-2021-24883 | Medium | 5.4 | 2021-11-29 | The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which could allow users with a role as low as C… |
CVE-2021-24876 | Medium | 6.1 | 2021-11-29 | The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a… |
CVE-2021-24860 | High | 7.2 | 2021-11-29 | The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading t… |
CVE-2021-24842 | Medium | 5.4 | 2021-11-29 | The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1) list private post titl… |
CVE-2021-24822 | Medium | 5.4 | 2021-11-29 | The Stylish Cost Calculator WordPress plugin before 7.0.4 does not have any authorisation and CSRF checks on some of its AJAX actions (available to authenticat… |
CVE-2021-24811 | Medium | 4.8 | 2021-11-29 | The Shop Page WP WordPress plugin before 1.2.8 does not sanitise and escape some of the Product fields, allowing high privilege users to perform Cross-Site Scr… |
CVE-2021-24768 | Medium | 4.8 | 2021-11-29 | The WP RSS Aggregator WordPress plugin before 4.19.2 does not properly sanitise and escape the URL to Blacklist field, allowing malicious HTML to be inserted b… |
CVE-2021-24755 | High | 8.8 | 2021-11-29 | The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploit… |
CVE-2021-24751 | Medium | 5.4 | 2021-11-29 | The GenerateBlocks WordPress plugin before 1.4.0 does not validate the generateblocks/container block's tagName attribute, which could allow users with a role… |
CVE-2021-24749 | Medium | 4.3 | 2021-11-29 | The URL Shortify WordPress plugin before 1.5.1 does not have CSRF check in place when bulk-deleting links or groups, which could allow attackers to make a logg… |
CVE-2021-24748 | High | 8.8 | 2021-11-29 | The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET parameters before using them in SQL state… |
CVE-2021-24745 | Medium | 5.4 | 2021-11-29 | The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which co… |
CVE-2021-38283 | High | 7.5 | 2021-11-29 | Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read application log files containing sensitive information via a predictable /… |
CVE-2021-38147 | High | 7.5 | 2021-11-29 | Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, bec… |
CVE-2021-21707 | Medium | 5.3 | 2021-11-29 | In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filena… |
CVE-2021-44077 | Critical | 9.8 | 2021-11-29 | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remot… |
CVE-2021-32061 | Medium | 5.3 | 2021-11-29 | S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a <Key>../ substring in a ListBucketResult element. |
CVE-2021-44094 | High | 7.8 | 2021-11-28 | ZrLog 2.2.2 has a remote command execution vulnerability at plugin download function, it could execute any JAR file |
CVE-2021-44093 | Critical | 9.8 | 2021-11-28 | A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file… |
CVE-2021-4020 | Medium | 5.4 | 2021-11-27 | janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-23654 | Medium | 5.6 | 2021-11-26 | This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would b… |
CVE-2021-43785 | High | 7.6 | 2021-11-26 | @joeattardi/emoji-button is a Vanilla JavaScript emoji picker component. In affected versions there are two vectors for XSS attacks: a URL for a custom emoji… |
CVE-2021-43776 | High | 7.4 | 2021-11-26 | Backstage is an open platform for building developer portals. In affected versions the auth-backend plugin allows a malicious actor to trick another user into… |
CVE-2021-41279 | High | 7.7 | 2021-11-26 | BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload cra… |
CVE-2021-41243 | Critical | 9.1 | 2021-11-26 | There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload files… |
CVE-2021-40833 | Medium | 5.5 | 2021-11-26 | A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service. The vulnerability can be exploited… |
CVE-2021-36919 | Medium | 6.1 | 2021-11-26 | Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable parameters (&id… |
CVE-2021-36843 | Medium | 4.8 | 2021-11-26 | Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Floating Social Media Icon plugin (versions <= 4.3.5) Social Media Config… |
CVE-2021-35533 | High | 7.5 | 2021-11-26 | Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500… |
CVE-2021-26615 | High | 7.8 | 2021-11-26 | ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow. |
CVE-2021-26611 | High | 8.1 | 2021-11-26 | HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.(reboot, factory rese… |
CVE-2021-36807 | High | 8.8 | 2021-11-26 | An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8. |
CVE-2021-25269 | Medium | 4.4 | 2021-11-26 | A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component… |
CVE-2021-38686 | High | 8.8 | 2021-11-26 | An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the… |
CVE-2021-38685 | Critical | 9.8 | 2021-11-26 | A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary c… |
CVE-2021-44225 | Medium | 5.4 | 2021-11-26 | In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property… |
CVE-2021-44223 | High | 8.1 | 2021-11-25 | WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote attackers to execute arbitrary code via a supply-chain att… |
CVE-2021-44219 | Critical | 9.8 | 2021-11-24 | Gin-Vue-Admin before 2.4.6 mishandles a SQL database. |
CVE-2021-43778 | Critical | 9.1 | 2021-11-24 | Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable… |
CVE-2021-41270 | Medium | 6.5 | 2021-11-24 | Symfony/Serializer handles serializing and deserializing data structures for Symfony, a PHP framework for web and console applications and a set of reusable PH… |
CVE-2021-41268 | Medium | 6.5 | 2021-11-24 | Symfony/SecurityBundle is the security system for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Since the rew… |
CVE-2021-41267 | Medium | 6.5 | 2021-11-24 | Symfony/Http-Kernel is the HTTP kernel component for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Headers th… |
CVE-2021-22957 | High | 8.8 | 2021-11-24 | A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a… |
CVE-2021-43268 | Medium | 6.5 | 2021-11-24 | An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a doub… |
CVE-2021-38873 | High | 7.8 | 2021-11-24 | IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper val… |
CVE-2021-36917 | Medium | 6.5 | 2021-11-24 | WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used… |
CVE-2021-36916 | High | 8.6 | 2021-11-24 | The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieved and used inside a… |
CVE-2021-34424 | High | 7.5 | 2021-11-24 | A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for… |
CVE-2021-34423 | Critical | 9.8 | 2021-11-24 | A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for… |
CVE-2021-22049 | Critical | 9.8 | 2021-11-24 | The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A malicious actor wi… |
CVE-2021-21980 | High | 7.5 | 2021-11-24 | The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Se… |
CVE-2021-43780 | Medium | 6.8 | 2021-11-24 | Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading data sources like JSON, CSV, or Excel is… |
CVE-2021-43777 | Medium | 6.8 | 2021-11-24 | Redash is a package for data visualization and sharing. In Redash version 10.0 and prior, the implementation of Google Login (via OAuth) incorrectly uses the `… |
CVE-2021-41192 | High | 8.1 | 2021-11-24 | Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without explicitly specifying the `REDASH_COOKIE_S… |
CVE-2021-3554 | Critical | 9.0 | 2021-11-24 | Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attack… |
CVE-2021-3553 | Medium | 5.3 | 2021-11-24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protec… |
CVE-2021-3552 | Medium | 5.3 | 2021-11-24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy request… |
CVE-2021-32037 | Medium | 6.5 | 2021-11-24 | An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually… |
CVE-2021-31822 | High | 7.8 | 2021-11-24 | When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged… |
CVE-2021-20850 | Critical | 9.8 | 2021-11-24 | PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) allows a remo… |
CVE-2021-20848 | Medium | 6.1 | 2021-11-24 | Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors. |
CVE-2021-20846 | High | 8.8 | 2021-11-24 | Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the authe… |
CVE-2021-20845 | High | 8.8 | 2021-11-24 | Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote attacker to hijack the authentication of… |
CVE-2021-20844 | Medium | 5.7 | 2021-11-24 | Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and e… |
CVE-2021-20843 | Medium | 5.4 | 2021-11-24 | Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier… |
CVE-2021-20842 | Medium | 6.5 | 2021-11-24 | Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack the authentication of Administrator and… |
CVE-2021-20841 | Medium | 6.5 | 2021-11-24 | Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to al… |
CVE-2021-20840 | Medium | 6.1 | 2021-11-24 | Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbi… |
CVE-2021-20835 | High | 7.5 | 2021-11-24 | Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) v… |
CVE-2021-44140 | Critical | 9.1 | 2021-11-24 | Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logou… |
CVE-2021-40369 | Medium | 6.1 | 2021-11-24 | A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow the attacker… |
CVE-2021-28709 | High | 7.8 | 2021-11-24 | issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr… |
CVE-2021-28705 | High | 7.8 | 2021-11-24 | issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr… |
CVE-2021-43221 | Medium | 4.2 | 2021-11-24 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2021-43220 | Low | 3.1 | 2021-11-24 | Microsoft Edge for iOS Spoofing Vulnerability |
CVE-2021-43211 | Medium | 5.5 | 2021-11-24 | Windows 10 Update Assistant Elevation of Privilege Vulnerability |
CVE-2021-42308 | Low | 3.1 | 2021-11-24 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2021-42306 | High | 8.1 | 2021-11-24 | An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate k… |
CVE-2021-42297 | Medium | 5.0 | 2021-11-24 | Windows 10 Update Assistant Elevation of Privilege Vulnerability |
CVE-2021-28708 | High | 8.8 | 2021-11-24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV… |
CVE-2021-28707 | High | 8.8 | 2021-11-24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV… |
CVE-2021-28706 | High | 8.6 | 2021-11-24 | guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its… |
CVE-2021-28704 | High | 8.8 | 2021-11-24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV… |
CVE-2021-42785 | Critical | 9.8 | 2021-11-23 | Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate pa… |
CVE-2021-42784 | Critical | 9.8 | 2021-11-23 | OS Command Injection vulnerability in debug_fcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP reques… |
CVE-2021-42783 | Critical | 9.8 | 2021-11-23 | Missing Authentication for Critical Function vulnerability in debug_post_set.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute a… |
CVE-2021-38004 | Medium | 4.3 | 2021-11-23 | Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-38003 | High | 8.8 | 2021-11-23 | Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-38002 | Critical | 9.6 | 2021-11-23 | Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag… |
CVE-2021-38001 | High | 8.8 | 2021-11-23 | Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38000 | Medium | 6.1 | 2021-11-23 | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a m… |
CVE-2021-37999 | Medium | 6.1 | 2021-11-23 | Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new brow… |
CVE-2021-37998 | High | 8.8 | 2021-11-23 | Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-37997 | High | 8.8 | 2021-11-23 | Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap… |
CVE-2021-35033 | High | 7.8 | 2021-11-23 | A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an… |
CVE-2021-43775 | High | 8.6 | 2021-11-23 | Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By mani… |