CVE-2021-28xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
613 records · Page 5 of 7
Remote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedWindows DNS Information Disclosure Vulnerability
UpdatedRemote Procedure Call Runtime Remote Code Execution Vulnerability
UpdatedWindows AppX Deployment Server Denial of Service Vulnerability
UpdatedWindows SMB Information Disclosure Vulnerability
UpdatedWindows SMB Information Disclosure Vulnerability
UpdatedWindows DNS Information Disclosure Vulnerability
Updated- CVE-2021-28322: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability 7.8 High
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Updated - CVE-2021-28321: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability 7.8 High
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Updated - CVE-2021-28320: Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability 7.8 High
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
Updated Windows TCP/IP Driver Denial of Service Vulnerability
UpdatedWindows GDI+ Information Disclosure Vulnerability
UpdatedMicrosoft Windows Codecs Library Information Disclosure Vulnerability
UpdatedWindows WLAN AutoConfig Service Security Feature Bypass Vulnerability
UpdatedWindows Media Video Decoder Remote Code Execution Vulnerability
UpdatedWindows Hyper-V Elevation of Privilege Vulnerability
Updated- CVE-2021-28313: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability 7.8 High
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Updated Windows NTFS Denial of Service Vulnerability
UpdatedWindows Application Compatibility Cache Denial of Service Vulnerability
UpdatedWin32k Elevation of Privilege Vulnerability
UpdatedWindows Kernel Information Disclosure Vulnerability
UpdatedAn issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.
UpdatedAn issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.
UpdatedAn issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.
UpdatedAn issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.
UpdatedA stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.
UpdatedNULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.
UpdatedOnline Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.
UpdatedOnline Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).
UpdatedSeceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature. The lack of correct configuration leads to recovery of the password reset link generated via the password reset functionality, and thus an unauthenticated attacker can set an arbitrary password for any user.
UpdatedA cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.
UpdatedCSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML
UpdatedA Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.
UpdatedA Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c.
UpdatedA Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.
UpdatedA Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
UpdatedSoyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.
UpdatedSoyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions.
UpdatedA deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.
UpdatedCA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an argument of the runpicEhealth executable, the script code will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
UpdatedCA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is run. The code in the library will be executed as the root user. NOTE: This vulnerability only affects pro
UpdatedCA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempts. An attacker is able to perform an arbitrary number of /web/frames/ authentication attempts using different passwords, and eventually gain access to a targeted account, NOTE: This vulnerability only affects products that are no longer supported by the maintainer
UpdatedCA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS). The impact is: An authenticated remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and perform a Reflected Cross-Site Scripting attack against the platform users. The affected endpoints are: cgi/nhWeb with the parameter report, aviewbin/filtermibobj
UpdatedCA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer support
UpdatedPbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account.
UpdatedSQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cf_name" parameter when creating a new filter under the "Collections" tab.
Updated- CVE-2021-28237: LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13. Unscored
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
Updated LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.
UpdatedAuthentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.
UpdatedHeap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in ok_jpg.c.
UpdatedBootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.
UpdatedExample EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.
UpdatedA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
UpdatedAn unlimited recursion in DxeCore in EDK II.
UpdatedThe specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
UpdatedThe specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
UpdatedThe specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
UpdatedThe specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
UpdatedThe specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Updated- CVE-2021-28204: ASUS BMC's firmware: command injection - Modify user’s information function 7.2 High
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Updated The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
UpdatedThe Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
UpdatedThe Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
UpdatedThe CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated- CVE-2021-28199: ASUS BMC's firmware: buffer overflow - Modify user’s information function 4.9 Medium
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated- CVE-2021-28197: ASUS BMC's firmware: buffer overflow - Active Directory configuration function 4.9 Medium
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
UpdatedThe Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated- CVE-2021-28194: ASUS BMC's firmware: buffer overflow - Remote image configuration setting 4.9 Medium
The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
UpdatedThe specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
UpdatedThe Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
UpdatedThe specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
UpdatedThe SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated- CVE-2021-28188: ASUS BMC's firmware: buffer overflow - Modify user’s information function 4.9 Medium
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated- CVE-2021-28186: ASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisition 4.9 Medium
The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated - CVE-2021-28185: ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition 4.9 Medium
The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated - CVE-2021-28184: ASUS BMC's firmware: buffer overflow - Active Directory configuration function 4.9 Medium
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated- CVE-2021-28182: ASUS BMC's firmware: buffer overflow - Web Service configuration function 4.9 Medium
The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated - CVE-2021-28181: ASUS BMC's firmware: buffer overflow - Remote video configuration setting 4.9 Medium
The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Updated