2021 CVEs (page 91)
Page 91 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40872 | High | 7.5 | 2021-11-10 | An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an ano… |
CVE-2021-40871 | High | 7.5 | 2021-11-10 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted mes… |
CVE-2021-33816 | Critical | 9.8 | 2021-11-10 | The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shell_e… |
CVE-2021-33618 | Medium | 6.1 | 2021-11-10 | Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the user-m… |
CVE-2021-42111 | Medium | 5.5 | 2021-11-10 | An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code… |
CVE-2021-3572 | Medium | 5.7 | 2021-11-10 | A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a differe… |
CVE-2021-32023 | High | 7.8 | 2021-11-10 | An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to… |
CVE-2021-32022 | Medium | 5.5 | 2021-11-10 | A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to po… |
CVE-2021-32021 | High | 7.8 | 2021-11-10 | A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to poten… |
CVE-2021-22048 | High | 8.8 | 2021-11-10 | The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor wit… |
CVE-2021-41038 | Medium | 6.1 | 2021-11-10 | In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage(). |
CVE-2021-40520 | Critical | 9.8 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials. |
CVE-2021-40517 | Medium | 5.4 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using… |
CVE-2021-3380 | Medium | 6.5 | 2021-11-10 | Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality. |
CVE-2021-3064 | Critical | 9.8 | 2021-11-10 | A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attack… |
CVE-2021-3063 | High | 7.5 | 2021-11-10 | An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthent… |
CVE-2021-3062 | High | 8.1 | 2021-11-10 | An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access to GlobalProtect portals and gateways to connect to t… |
CVE-2021-3061 | Medium | 6.4 | 2021-11-10 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator with access to the C… |
CVE-2021-3060 | High | 8.1 | 2021-11-10 | An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based a… |
CVE-2021-3059 | High | 8.1 | 2021-11-10 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS management interface exists when performing dynamic updates. This vulnerability enables… |
CVE-2021-3058 | High | 8.8 | 2021-11-10 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permissions to use XML API the… |
CVE-2021-3056 | High | 8.8 | 2021-11-10 | A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated attacker to execute arbitrary code with ro… |
CVE-2021-43564 | High | 7.5 | 2021-11-10 | An issue was discovered in the jobfair (aka Job Fair) extension before 1.0.13 and 2.x before 2.0.2 for TYPO3. The extension fails to protect or obfuscate filen… |
CVE-2021-43563 | High | 8.8 | 2021-11-10 | An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The Access Control in the bundled media browser is bro… |
CVE-2021-42062 | Medium | 4.3 | 2021-11-10 | SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affecte… |
CVE-2021-41427 | Medium | 6.1 | 2021-11-10 | Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi. |
CVE-2021-41426 | High | 8.8 | 2021-11-10 | Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm. |
CVE-2021-40521 | Critical | 9.8 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution. |
CVE-2021-40519 | Critical | 10.0 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials. |
CVE-2021-40518 | Medium | 6.5 | 2021-11-10 | Airangel HSMX Gateway devices through 5.2.04 allow CSRF. |
CVE-2021-40504 | Medium | 4.9 | 2021-11-10 | A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 7… |
CVE-2021-40503 | High | 7.8 | 2021-11-10 | An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on… |
CVE-2021-40502 | High | 8.8 | 2021-11-10 | SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation o… |
CVE-2021-40501 | High | 8.1 | 2021-11-10 | SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authenticated business user, resulting in es… |
CVE-2021-43562 | High | 8.8 | 2021-11-10 | An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension fails to restrict the image download to… |
CVE-2021-43561 | Medium | 5.4 | 2021-11-10 | An XSS issue was discovered in the google_for_jobs (aka Google for Jobs) extension before 1.5.1 and 2.x before 2.1.1 for TYPO3. The extension fails to properly… |
CVE-2021-43523 | Critical | 9.6 | 2021-11-10 | In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethost… |
CVE-2021-38887 | Medium | 6.5 | 2021-11-10 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used… |
CVE-2021-43136 | Critical | 9.8 | 2021-11-10 | An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform. |
CVE-2021-39474 | High | 7.2 | 2021-11-10 | Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability allows an attacker with privileges and… |
CVE-2021-34598 | High | 7.5 | 2021-11-10 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for da… |
CVE-2021-34582 | Medium | 4.8 | 2021-11-10 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based manageme… |
CVE-2021-25975 | Medium | 5.4 | 2021-11-10 | In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to… |
CVE-2021-25974 | Medium | 5.4 | 2021-11-10 | In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while… |
CVE-2021-31853 | High | 7.8 | 2021-11-10 | DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escal… |
CVE-2021-22870 | Medium | 6.5 | 2021-11-10 | A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit… |
CVE-2021-43209 | High | 7.8 | 2021-11-10 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2021-43208 | High | 7.8 | 2021-11-10 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2021-42323 | Low | 3.3 | 2021-11-10 | Azure RTOS Information Disclosure Vulnerability |
CVE-2021-42322 | High | 7.8 | 2021-11-10 | Visual Studio Code Elevation of Privilege Vulnerability |
CVE-2021-42321 | High | 8.8 | 2021-11-10 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-42319 | Medium | 4.7 | 2021-11-10 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2021-42316 | High | 8.8 | 2021-11-10 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2021-42305 | Medium | 6.5 | 2021-11-10 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2021-42304 | Medium | 6.6 | 2021-11-10 | Azure RTOS Elevation of Privilege Vulnerability |
CVE-2021-42303 | Medium | 6.6 | 2021-11-10 | Azure RTOS Elevation of Privilege Vulnerability |
CVE-2021-42302 | Medium | 6.6 | 2021-11-10 | Azure RTOS Elevation of Privilege Vulnerability |
CVE-2021-42301 | Low | 3.3 | 2021-11-10 | Azure RTOS Information Disclosure Vulnerability |
CVE-2021-42300 | Medium | 6.0 | 2021-11-10 | Azure Sphere Tampering Vulnerability |
CVE-2021-42298 | High | 7.8 | 2021-11-10 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2021-42296 | High | 7.8 | 2021-11-10 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2021-42292 | High | 7.8 | 2021-11-10 | Microsoft Excel Security Feature Bypass Vulnerability |
CVE-2021-42291 | High | 7.5 | 2021-11-10 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2021-42288 | Medium | 5.7 | 2021-11-10 | Windows Hello Security Feature Bypass Vulnerability |
CVE-2021-42287 | High | 7.5 | 2021-11-10 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2021-42286 | High | 7.8 | 2021-11-10 | Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability |
CVE-2021-42285 | High | 7.8 | 2021-11-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-42284 | Medium | 6.8 | 2021-11-10 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2021-42283 | High | 8.8 | 2021-11-10 | NTFS Elevation of Privilege Vulnerability |
CVE-2021-42282 | High | 7.5 | 2021-11-10 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2021-42280 | Medium | 5.5 | 2021-11-10 | Windows Feedback Hub Elevation of Privilege Vulnerability |
CVE-2021-42279 | Medium | 4.2 | 2021-11-10 | Chakra Scripting Engine Memory Corruption Vulnerability |
CVE-2021-42278 | High | 7.5 | 2021-11-10 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2021-42277 | Medium | 5.5 | 2021-11-10 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
CVE-2021-42276 | High | 7.8 | 2021-11-10 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
CVE-2021-42275 | High | 8.8 | 2021-11-10 | Microsoft COM for Windows Remote Code Execution Vulnerability |
CVE-2021-42274 | Medium | 6.8 | 2021-11-10 | Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability |
CVE-2021-41379 | Medium | 5.5 | 2021-11-10 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2021-41378 | High | 7.8 | 2021-11-10 | Windows NTFS Remote Code Execution Vulnerability |
CVE-2021-41377 | High | 7.8 | 2021-11-10 | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
CVE-2021-41376 | Low | 2.3 | 2021-11-10 | Azure Sphere Information Disclosure Vulnerability |
CVE-2021-41375 | Medium | 4.4 | 2021-11-10 | Azure Sphere Information Disclosure Vulnerability |
CVE-2021-41374 | Medium | 6.7 | 2021-11-10 | Azure Sphere Information Disclosure Vulnerability |
CVE-2021-41373 | Medium | 5.5 | 2021-11-10 | FSLogix Information Disclosure Vulnerability |
CVE-2021-41372 | High | 7.6 | 2021-11-10 | A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files… |
CVE-2021-41371 | Medium | 4.4 | 2021-11-10 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
CVE-2021-41370 | High | 7.8 | 2021-11-10 | NTFS Elevation of Privilege Vulnerability |
CVE-2021-41368 | Medium | 6.1 | 2021-11-10 | Microsoft Access Remote Code Execution Vulnerability |
CVE-2021-41367 | High | 7.8 | 2021-11-10 | NTFS Elevation of Privilege Vulnerability |
CVE-2021-41366 | High | 7.8 | 2021-11-10 | Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability |
CVE-2021-41356 | High | 7.5 | 2021-11-10 | Windows Denial of Service Vulnerability |
CVE-2021-41351 | Medium | 4.3 | 2021-11-10 | Microsoft Edge (Chrome based) Spoofing on IE Mode |
CVE-2021-41349 | Medium | 6.5 | 2021-11-10 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2021-40442 | High | 7.8 | 2021-11-10 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-38666 | High | 8.8 | 2021-11-10 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2021-38665 | High | 7.4 | 2021-11-10 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
CVE-2021-38631 | Medium | 4.4 | 2021-11-10 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
CVE-2021-36957 | High | 7.8 | 2021-11-10 | Windows Desktop Bridge Elevation of Privilege Vulnerability |
CVE-2021-26444 | Low | 3.3 | 2021-11-10 | Azure RTOS Information Disclosure Vulnerability |
CVE-2021-26443 | Critical | 9.0 | 2021-11-10 | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability |