CVE-2021-28xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
613 records · Page 4 of 7
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train
UpdatedIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and prior releases in the MOS-0.2x train MOS-0.31.1 and prior releases in
UpdatedIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases
UpdatedOn systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23
UpdatedIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train M
UpdatedIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases
UpdatedIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases
UpdatedUnisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format.
UpdatedIn OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.
UpdatedEricsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly privileged role). Users in the same AMOS authorization group can retrieve managed-network data that was not set to be accessible to the entire group (i.e., was only set to be accessible to a subset of that group).
UpdatedIn Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application.
UpdatedAn issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes stuck in a loop waiting for the YubiHSM to send it data, preventing any further operations until the yubihsm-connector is restarted. An attacker can
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
UpdatedWindows CSC Service Information Disclosure Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedWindows Hyper-V Remote Code Execution Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
Updated- CVE-2021-28472: Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability 7.8 High
Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability
Updated Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
UpdatedVisual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
UpdatedWeb Media Extensions Remote Code Execution Vulnerability
UpdatedVP9 Video Extensions Remote Code Execution Vulnerability
UpdatedDynamics Finance and Operations Cross-site Scripting Vulnerability
UpdatedAzure Sphere Unsigned Code Execution Vulnerability
UpdatedAzure DevOps Server Spoofing Vulnerability
UpdatedAzure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Information Disclosure Vulnerability
UpdatedMicrosoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft Word Remote Code Execution Vulnerability
UpdatedMicrosoft Outlook Memory Corruption Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Denial of Service Vulnerability
UpdatedMicrosoft Office Remote Code Execution Vulnerability
UpdatedVisual Studio Code Kubernetes Tools Remote Code Execution Vulnerability
Updated- CVE-2021-28447: Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability 4.4 Medium
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
Updated Windows Portmapping Information Disclosure Vulnerability
UpdatedWindows Network File System Remote Code Execution Vulnerability
UpdatedWindows Hyper-V Security Feature Bypass Vulnerability
UpdatedWindows Console Driver Denial of Service Vulnerability
UpdatedWindows TCP/IP Information Disclosure Vulnerability
UpdatedWindows Hyper-V Information Disclosure Vulnerability
UpdatedWindows Installer Elevation of Privilege Vulnerability
UpdatedWindows TCP/IP Driver Denial of Service Vulnerability
UpdatedWindows Console Driver Denial of Service Vulnerability
UpdatedWindows Installer Information Disclosure Vulnerability
UpdatedWindows Speech Runtime Elevation of Privilege Vulnerability
UpdatedWindows Event Tracing Information Disclosure Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedInteger overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.
UpdatedFile upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functionality. The original file upload vulnerability (CVE-2020-27387) was remediated by restricting the PHP extensions; however, we confirmed that the filter was bypassed via uploading an arbitrary .htaccess and *.hello files in order to execute PHP code to gain RC
UpdatedBuffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
UpdatedA stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in adminprofile.php.
UpdatedMultiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21417. Reason: This candidate is a duplicate of CVE-2021-21417. Notes: All CVE users should reference CVE-2021-21417 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Updated · Rejected recordA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.
UpdatedThe "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.
UpdatedA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.
UpdatedA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.
UpdatedAn issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges.
UpdatedOrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.
UpdatedA privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. A User Administrator or Administrator account is required to perform this. This occurs in the runBeforeScript method in harvesters/src/main/java/org/fao/geonet/kernel/harvest/harvester/localfilesystem/LocalFile
UpdatedZoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.
UpdatedThe vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.
UpdatedThe aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.
Updatedweb/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.
UpdatedGitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
UpdatedChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
Updated- CVE-2021-28376: ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files. Unscored
ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.
Updated An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
UpdatedThe Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (s
UpdatedThe auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in production. Semantic version numbers such as 21.03 appear to exist, but are automatically generated from
UpdatedThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the victim TUTK device.
UpdatedThe urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently a
UpdatedAn issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked (with respect to the available data) at this stage, and these variables are susceptible to integer underflow, it i
UpdatedAn issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.
UpdatedThe "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2. Please also update your Python version to
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedWindows Speech Runtime Elevation of Privilege Vulnerability
UpdatedWindows GDI+ Remote Code Execution Vulnerability
UpdatedWindows GDI+ Remote Code Execution Vulnerability
UpdatedWindows GDI+ Remote Code Execution Vulnerability
UpdatedWindows Speech Runtime Elevation of Privilege Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
Updated