2021 CVEs (page 96)
Page 96 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-36183 | High | 7.4 | 2021-11-02 | An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attack… |
CVE-2021-36176 | Medium | 6.1 | 2021-11-02 | Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a… |
CVE-2021-36174 | Medium | 4.3 | 2021-11-02 | A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a… |
CVE-2021-41238 | High | 8.6 | 2021-11-02 | Hangfire is an open source system to perform background job processing in a .NET or .NET Core applications. No Windows Service or separate process required. Da… |
CVE-2021-41232 | High | 8.1 | 2021-11-02 | Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability whic… |
CVE-2021-41019 | Low | 3.5 | 2021-11-02 | An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LD… |
CVE-2021-36181 | Low | 3.1 | 2021-11-02 | A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal b… |
CVE-2021-36172 | Medium | 4.3 | 2021-11-02 | An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal before 6.0.6 may allow an attacker who con… |
CVE-2021-32595 | Medium | 6.5 | 2021-11-02 | Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a… |
CVE-2021-26107 | Medium | 6.3 | 2021-11-02 | An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile… |
CVE-2021-38948 | Critical | 9.1 | 2021-11-02 | IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit… |
CVE-2021-29888 | High | 8.8 | 2021-11-02 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… |
CVE-2021-29875 | High | 7.5 | 2021-11-02 | IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third party domain access vulnerability. IBM X… |
CVE-2021-29771 | Medium | 5.4 | 2021-11-02 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2021-29738 | Medium | 5.4 | 2021-11-02 | IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery (SSRF). This may allow an authenticate… |
CVE-2021-29737 | High | 7.5 | 2021-11-02 | IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of the REST API server certificate. IBM X-… |
CVE-2021-36794 | Critical | 9.8 | 2021-11-02 | In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Inve… |
CVE-2021-42568 | Medium | 4.3 | 2021-11-02 | Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account. |
CVE-2021-36925 | High | 7.8 | 2021-11-02 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write o… |
CVE-2021-36924 | High | 7.8 | 2021-11-02 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow (leading to… |
CVE-2021-36923 | High | 7.8 | 2021-11-02 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB d… |
CVE-2021-36922 | High | 7.8 | 2021-11-02 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB d… |
CVE-2021-42763 | High | 7.5 | 2021-11-02 | Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwards a HTTP request… |
CVE-2021-37842 | High | 7.5 | 2021-11-02 | metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials can get leaked in debug logs. Config key… |
CVE-2021-27722 | Medium | 5.5 | 2021-11-02 | An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while re… |
CVE-2021-36560 | Critical | 9.8 | 2021-11-02 | Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin. |
CVE-2021-33611 | Medium | 6.1 | 2021-11-02 | Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allow… |
CVE-2021-3765 | High | 7.5 | 2021-11-02 | validator.js is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-33593 | Medium | 5.3 | 2021-11-02 | Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar… |
CVE-2021-25973 | Medium | 6.5 | 2021-11-02 | In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happen… |
CVE-2021-41310 | Medium | 6.1 | 2021-11-01 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (… |
CVE-2021-43058 | Medium | 6.1 | 2021-11-01 | An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker co… |
CVE-2021-41187 | High | 8.1 | 2021-11-01 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in… |
CVE-2021-39346 | Medium | 4.8 | 2021-11-01 | The Google Maps Easy WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters… |
CVE-2021-39341 | High | 8.2 | 2021-11-01 | The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validati… |
CVE-2021-39340 | Medium | 4.8 | 2021-11-01 | The Notification WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters fou… |
CVE-2021-39333 | High | 8.1 | 2021-11-01 | The Hashthemes Demo Importer Plugin <= 1.1.1 for WordPress contained several AJAX functions which relied on a nonce which was visible to all logged-in users fo… |
CVE-2021-38356 | Medium | 6.1 | 2021-11-01 | The NextScripts: Social Networks Auto-Poster <= 4.3.20 WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $_REQUEST['page'] parameter whi… |
CVE-2021-20136 | Critical | 9.8 | 2021-11-01 | ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote… |
CVE-2021-31849 | High | 8.4 | 2021-11-01 | SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator t… |
CVE-2021-31848 | High | 8.4 | 2021-11-01 | Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DL… |
CVE-2021-42917 | Medium | 5.5 | 2021-11-01 | Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream. |
CVE-2021-26740 | Critical | 9.8 | 2021-11-01 | Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code. |
CVE-2021-26739 | Critical | 9.8 | 2021-11-01 | SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter. |
CVE-2021-38847 | High | 8.8 | 2021-11-01 | S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows att… |
CVE-2021-3705 | Critical | 9.8 | 2021-11-01 | Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigure, reset the devi… |
CVE-2021-3704 | High | 7.5 | 2021-11-01 | Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device. |
CVE-2021-3440 | High | 7.8 | 2021-11-01 | HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevation of privilege. |
CVE-2021-29213 | Medium | 6.7 | 2021-11-01 | A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant Micro… |
CVE-2021-29212 | Critical | 9.8 | 2021-11-01 | A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulne… |
CVE-2021-27005 | High | 7.5 | 2021-11-01 | Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker… |
CVE-2021-27004 | Medium | 5.5 | 2021-11-01 | System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover… |
CVE-2021-22564 | Medium | 4.5 | 2021-11-01 | For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the deco… |
CVE-2021-22563 | Medium | 4.5 | 2021-11-01 | Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either l… |
CVE-2021-42557 | High | 7.5 | 2021-11-01 | In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials. |
CVE-2021-25878 | Medium | 6.1 | 2021-11-01 | AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote att… |
CVE-2021-25877 | High | 7.2 | 2021-11-01 | AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code… |
CVE-2021-25876 | Medium | 6.1 | 2021-11-01 | AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal admi… |
CVE-2021-25875 | Medium | 6.1 | 2021-11-01 | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a… |
CVE-2021-25874 | High | 7.5 | 2021-11-01 | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated… |
CVE-2021-27644 | High | 8.8 | 2021-11-01 | In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with… |
CVE-2021-41973 | Medium | 6.5 | 2021-11-01 | In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header… |
CVE-2021-24813 | Medium | 4.8 | 2021-11-01 | The Events Made Easy WordPress plugin before 2.2.24 does not sanitise and escape Custom Field Names, allowing high privilege users to perform Cross-Site Script… |
CVE-2021-24809 | High | 8.8 | 2021-11-01 | The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_better_messages_leave_chat, bp_better_messa… |
CVE-2021-24808 | Medium | 6.1 | 2021-11-01 | The BP Better Messages WordPress plugin before 1.9.9.41 sanitise (with sanitize_text_field) but does not escape the 'subject' parameter before outputting it ba… |
CVE-2021-24799 | Medium | 4.3 | 2021-11-01 | The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in adm… |
CVE-2021-24794 | Medium | 4.8 | 2021-11-01 | The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege… |
CVE-2021-24793 | Medium | 4.8 | 2021-11-01 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12 does not escape the Feed URL added to a campaign before outputting it in an attribute, allowing h… |
CVE-2021-24789 | Medium | 4.8 | 2021-11-01 | The Flat Preloader WordPress plugin before 1.5.5 does not escape some of its settings when outputting them in attribute in the frontend, which could allow high… |
CVE-2021-24781 | Medium | 4.3 | 2021-11-01 | The Image Source Control WordPress plugin before 2.3.1 allows users with a role as low as Contributor to change arbitrary post meta fields of arbitrary posts (… |
CVE-2021-24773 | Medium | 4.8 | 2021-11-01 | The WordPress Download Manager WordPress plugin before 3.2.16 does not escape some of the Download settings when outputting them, allowing high privilege users… |
CVE-2021-24770 | Medium | 6.5 | 2021-11-01 | The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users… |
CVE-2021-24757 | Medium | 5.3 | 2021-11-01 | The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX action (available to both unauthenticate… |
CVE-2021-24742 | Medium | 6.5 | 2021-11-01 | The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it us… |
CVE-2021-24723 | Medium | 5.4 | 2021-11-01 | The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XS… |
CVE-2021-24722 | Medium | 4.8 | 2021-11-01 | The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high… |
CVE-2021-24717 | High | 8.8 | 2021-11-01 | The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose ti… |
CVE-2021-24716 | Medium | 5.4 | 2021-11-01 | The Modern Events Calendar Lite WordPress plugin before 5.22.3 does not properly sanitize or escape values set by users with access to adjust settings withing… |
CVE-2021-24715 | Medium | 4.8 | 2021-11-01 | The WP Sitemap Page WordPress plugin before 1.7.0 does not properly sanitise and escape some of its settings, which could allow high privilege users to perform… |
CVE-2021-24685 | Medium | 5.4 | 2021-11-01 | The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its settings, as well as does not sanitise and escape them, which co… |
CVE-2021-24682 | Medium | 5.4 | 2021-11-01 | The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low… |
CVE-2021-24624 | Medium | 4.8 | 2021-11-01 | The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist setti… |
CVE-2021-24572 | Medium | 4.3 | 2021-11-01 | The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletio… |
CVE-2021-24570 | Medium | 4.3 | 2021-11-01 | The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create… |
CVE-2021-24539 | Medium | 4.8 | 2021-11-01 | The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when output… |
CVE-2021-40348 | High | 8.8 | 2021-11-01 | Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize the configuration filename used to appen… |
CVE-2021-42694 | High | 8.3 | 2021-11-01 | An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code id… |
CVE-2021-42574 | High | 8.3 | 2021-11-01 | An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control se… |
CVE-2021-41313 | Medium | 4.3 | 2021-11-01 | Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Imprope… |
CVE-2021-20839 | Medium | 6.5 | 2021-11-01 | Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) a… |
CVE-2021-20838 | High | 7.5 | 2021-11-01 | Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) a… |
CVE-2021-33259 | Medium | 5.3 | 2021-10-31 | Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history. |
CVE-2021-36808 | Medium | 5.9 | 2021-10-30 | A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115. |
CVE-2021-1123 | Medium | 5.5 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can deadlock, which may lead to denial of service. |
CVE-2021-1122 | Medium | 5.5 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of se… |
CVE-2021-1121 | Medium | 5.5 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel driver, where a vGPU can cause resource starvation among other vGPUs hosted on… |
CVE-2021-1120 | High | 7.0 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the guest OS may not be properly null termin… |
CVE-2021-1119 | High | 7.1 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service… |
CVE-2021-1118 | High | 7.8 | 2021-10-29 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to execute privileged operations by the gu… |
CVE-2021-41746 | High | 7.5 | 2021-10-29 | SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obt… |