2021 CVEs (page 97)
Page 97 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41646 | Critical | 9.8 | 2021-10-29 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the ima… |
CVE-2021-41189 | High | 7.2 | 2021-10-29 | DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become s… |
CVE-2021-41645 | High | 8.8 | 2021-10-29 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrar… |
CVE-2021-41644 | Critical | 9.8 | 2021-10-29 | Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image up… |
CVE-2021-41643 | Critical | 9.8 | 2021-10-29 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field. |
CVE-2021-41676 | Critical | 9.8 | 2021-10-29 | An SQL Injection vulnerabilty exists in the oretnom23 Pharmacy Point of Sale System 1.0 in the login function in actions.php. |
CVE-2021-41675 | High | 7.2 | 2021-10-29 | A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which vali… |
CVE-2021-41674 | Critical | 9.8 | 2021-10-29 | An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the user_email parameter in /admin/login.php. |
CVE-2021-3756 | Critical | 9.8 | 2021-10-29 | libmysofa is vulnerable to Heap-based Buffer Overflow |
CVE-2021-41186 | Medium | 5.9 | 2021-10-29 | Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parser_apache2 plugin in Fluentd v0.14.14… |
CVE-2021-39179 | High | 8.8 | 2021-10-29 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component i… |
CVE-2021-35237 | Medium | 5.0 | 2021-10-29 | A missing HTTP header (X-Frame-Options) in Kiwi Syslog Server has left customers vulnerable to click jacking. Clickjacking is an attack that occurs when an att… |
CVE-2021-3662 | Medium | 5.4 | 2021-10-29 | Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS). |
CVE-2021-3441 | Medium | 4.8 | 2021-10-29 | A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS). |
CVE-2021-22038 | High | 8.8 | 2021-10-29 | On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not… |
CVE-2021-22037 | High | 7.8 | 2021-10-29 | Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforc… |
CVE-2021-31862 | Medium | 6.1 | 2021-10-29 | SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication. |
CVE-2021-31627 | High | 8.8 | 2021-10-29 | Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the… |
CVE-2021-31624 | High | 8.8 | 2021-10-29 | Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the… |
CVE-2021-25742 | High | 7.6 | 2021-10-29 | A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secre… |
CVE-2021-41194 | Critical | 9.1 | 2021-10-28 | FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with Fi… |
CVE-2021-36551 | Medium | 5.4 | 2021-10-28 | TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to… |
CVE-2021-36550 | Medium | 5.4 | 2021-10-28 | TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulnerability allows atta… |
CVE-2021-36548 | Critical | 9.8 | 2021-10-28 | A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog of Monstra v3.0.4 allows attackers t… |
CVE-2021-36547 | Critical | 9.8 | 2021-10-28 | A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a c… |
CVE-2021-30840 | High | 7.8 | 2021-10-28 | This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted dfont file may… |
CVE-2021-30836 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15… |
CVE-2021-30834 | High | 7.8 | 2021-10-28 | A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security… |
CVE-2021-30833 | Medium | 5.5 | 2021-10-28 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to w… |
CVE-2021-30831 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously c… |
CVE-2021-30824 | High | 7.8 | 2021-10-28 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS… |
CVE-2021-30823 | Medium | 6.5 | 2021-10-28 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8… |
CVE-2021-30821 | High | 7.8 | 2021-10-28 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS B… |
CVE-2021-30818 | High | 8.8 | 2021-10-28 | A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, w… |
CVE-2021-30817 | Medium | 5.5 | 2021-10-28 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about… |
CVE-2021-30816 | Low | 2.4 | 2021-10-28 | The issue was addressed with improved permissions logic. This issue is fixed in iOS 15 and iPadOS 15. An attacker with physical access to a device may be able… |
CVE-2021-30814 | High | 7.8 | 2021-10-28 | A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a malicious… |
CVE-2021-30813 | Medium | 6.5 | 2021-10-28 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. A person with access to a host Mac may be able to bypass the Login… |
CVE-2021-30809 | High | 8.8 | 2021-10-28 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing ma… |
CVE-2021-30808 | Medium | 5.5 | 2021-10-28 | This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malicious application may be able to modify p… |
CVE-2021-1821 | Medium | 6.5 | 2021-10-28 | A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big Sur 11.5. Visiting a maliciously crafted webpage may… |
CVE-2021-3745 | Medium | 6.6 | 2021-10-28 | flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type |
CVE-2021-22097 | Medium | 6.5 | 2021-10-28 | In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body for a message with… |
CVE-2021-22096 | Medium | 4.3 | 2021-10-28 | In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the… |
CVE-2021-22047 | Medium | 5.3 | 2021-10-28 | In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured… |
CVE-2021-22044 | High | 7.5 | 2021-10-28 | In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annota… |
CVE-2021-41728 | Medium | 6.1 | 2021-10-28 | Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles. |
CVE-2021-3823 | High | 7.1 | 2021-10-28 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an… |
CVE-2021-3579 | High | 7.8 | 2021-10-28 | Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for W… |
CVE-2021-3576 | High | 7.8 | 2021-10-28 | Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\… |
CVE-2021-37254 | High | 7.5 | 2021-10-28 | In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party com… |
CVE-2021-37002 | Critical | 9.8 | 2021-10-28 | There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-37001 | High | 7.5 | 2021-10-28 | There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value to be modified. |
CVE-2021-36999 | High | 7.8 | 2021-10-28 | There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing users to o… |
CVE-2021-36998 | Medium | 5.3 | 2021-10-28 | There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is… |
CVE-2021-36997 | Medium | 5.3 | 2021-10-28 | There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerability may cause the G… |
CVE-2021-36996 | Medium | 5.3 | 2021-10-28 | There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual in… |
CVE-2021-36995 | High | 7.5 | 2021-10-28 | There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with t… |
CVE-2021-36994 | Low | 3.7 | 2021-10-28 | There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of… |
CVE-2021-36993 | High | 7.5 | 2021-10-28 | There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-36992 | High | 7.5 | 2021-10-28 | There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-36991 | High | 7.5 | 2021-10-28 | There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creat… |
CVE-2021-36990 | Critical | 9.8 | 2021-10-28 | There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions. |
CVE-2021-36989 | Critical | 9.8 | 2021-10-28 | There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions. |
CVE-2021-36988 | High | 7.5 | 2021-10-28 | There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity. |
CVE-2021-36987 | Medium | 5.9 | 2021-10-28 | There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vuln… |
CVE-2021-36986 | Critical | 9.8 | 2021-10-28 | There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions. |
CVE-2021-36985 | High | 7.5 | 2021-10-28 | There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to… |
CVE-2021-22491 | High | 7.5 | 2021-10-28 | There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-22490 | Medium | 5.3 | 2021-10-28 | There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect the device performance. |
CVE-2021-22488 | High | 7.5 | 2021-10-28 | There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with t… |
CVE-2021-22487 | High | 7.5 | 2021-10-28 | There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-22486 | High | 7.5 | 2021-10-28 | There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22485 | High | 7.5 | 2021-10-28 | There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22483 | High | 7.5 | 2021-10-28 | There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS. |
CVE-2021-22482 | Medium | 5.3 | 2021-10-28 | There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data. |
CVE-2021-22481 | High | 7.5 | 2021-10-28 | There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22475 | Medium | 5.3 | 2021-10-28 | There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22474 | Critical | 9.8 | 2021-10-28 | There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2021-22473 | High | 7.5 | 2021-10-28 | There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22472 | High | 7.5 | 2021-10-28 | There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22471 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash. |
CVE-2021-22470 | High | 7.8 | 2021-10-28 | A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain. |
CVE-2021-22469 | High | 7.1 | 2021-10-28 | A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause kernel out-of-bounds read. |
CVE-2021-22468 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to… |
CVE-2021-22467 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address. |
CVE-2021-22466 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash. |
CVE-2021-22465 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable. |
CVE-2021-22464 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart. |
CVE-2021-22463 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure. |
CVE-2021-22462 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash. |
CVE-2021-22461 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers may exploit this vulnerability to cause… |
CVE-2021-22460 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the c… |
CVE-2021-22459 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are u… |
CVE-2021-22458 | High | 7.8 | 2021-10-28 | A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. Local attackers may exploit this vuln… |
CVE-2021-22457 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause out-of-bounds write. |
CVE-2021-22456 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable. |
CVE-2021-22455 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause the memory which is no… |
CVE-2021-22454 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause c… |
CVE-2021-22453 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash. |