CVE-2021-31xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
760 records · Page 1 of 8
- CVE-2021-31999: Rancher: Privilege escalation vulnerability via malicious Connection header 8.8 High
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16.
Updated - CVE-2021-31998: inn: %post calls user owned file allowing local privilege escalation to root 6.8 Medium
A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to
Updated A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postorius or postorius-admin to root. This issue affects: openSUSE Leap 15.2 python-postorius version 1.3.2-lp152.1.2 and prior versions. openSUSE Factory python-postorius version 1.3.4-2.1 and prior versions.
UpdatedAn issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge().
UpdatedA user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices.
UpdatedA user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SMTP headers in the generated test email.
UpdatedA user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.
UpdatedUser controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.
UpdatedMicrosoft Defender Remote Code Execution Vulnerability
UpdatedPower BI Remote Code Execution Vulnerability
UpdatedPaint 3D Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
UpdatedMicrosoft Intune Management Extension Remote Code Execution Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedMicrosoft Defender Denial of Service Vulnerability
UpdatedWindows Hyper-V Denial of Service Vulnerability
UpdatedServer for NFS Information Disclosure Vulnerability
UpdatedServer for NFS Information Disclosure Vulnerability
UpdatedServer for NFS Denial of Service Vulnerability
UpdatedWindows GPSVC Elevation of Privilege Vulnerability
UpdatedEvent Tracing for Windows Information Disclosure Vulnerability
UpdatedWindows HTML Platforms Security Feature Bypass Vulnerability
UpdatedWindows TCP/IP Driver Security Feature Bypass Vulnerability
Updated- CVE-2021-31969: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Updated Windows Remote Desktop Services Denial of Service Vulnerability
UpdatedVP9 Video Extensions Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Information Disclosure Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedKerberos AppContainer Security Feature Bypass Vulnerability
UpdatedWindows InstallService Elevation of Privilege Vulnerability
UpdatedWindows Bind Filter Driver Information Disclosure Vulnerability
UpdatedScripting Engine Memory Corruption Vulnerability
UpdatedWindows NTLM Elevation of Privilege Vulnerability
UpdatedASP.NET Core Denial of Service Vulnerability
UpdatedWindows NTFS Elevation of Privilege Vulnerability
UpdatedWindows Kernel Information Disclosure Vulnerability
UpdatedWindows Common Log File System Driver Elevation of Privilege Vulnerability
UpdatedWindows Filter Manager Elevation of Privilege Vulnerability
UpdatedWindows Kernel-Mode Driver Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedMicrosoft Outlook Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedHEVC Video Extensions Remote Code Execution Vulnerability
UpdatedPaint 3D Remote Code Execution Vulnerability
UpdatedPaint 3D Remote Code Execution Vulnerability
Updated3D Viewer Information Disclosure Vulnerability
Updated3D Viewer Remote Code Execution Vulnerability
Updated3D Viewer Remote Code Execution Vulnerability
UpdatedMicrosoft Office Graphics Remote Code Execution Vulnerability
UpdatedMicrosoft Office Graphics Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
Updated- CVE-2021-31938: Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability 7.3 High
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
Updated Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Updated- CVE-2021-31936: Microsoft Accessibility Insights for Web Information Disclosure Vulnerability 7.4 High
Microsoft Accessibility Insights for Web Information Disclosure Vulnerability
Updated OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view.
UpdatedOX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone.
UpdatedA remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames (e.g., .phar or .pht). A remote authenticated administrator is able to upload a file containing arbitrary PHP code into specific directories via main/inc/lib/fileUpload.lib.php directory traversa
UpdatedNokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.
UpdatedPersistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the First Name or Last Name parameter upon registration. When a privileged user attempts to delete the account, the XSS payload will be executed.
UpdatedAnnex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals.
UpdatedAnnex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator. It was fixed in v2021.1.0.2.
UpdatedAn Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.
UpdatedAMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).
UpdatedPexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface.
UpdatedYubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass. This issue does not allow user presence (touch) or cryptographic signature verification to be bypassed, so an attacker would still need to physically possess and interact with the YubiKey or another enrolled authenticator. If pam-u2f is configured t
UpdatedPing Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.
UpdatedAn HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3.
UpdatedIstio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTO_PASSTHROUGH routing configuration.
UpdatedIstio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.
UpdatedAn issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.
UpdatedA flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality.
UpdatedA flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
UpdatedAn out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to
UpdatedIn JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.
UpdatedIn JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.
UpdatedIn JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.
UpdatedIn JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.
Updated- CVE-2021-31911: In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages. Unscored
In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.
Updated - CVE-2021-31910: In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible. Unscored
In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.
Updated In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.
Updated- CVE-2021-31908: In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages. Unscored
In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.
Updated In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly.
UpdatedIn JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file.
UpdatedIn JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.
UpdatedIn JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.
UpdatedIn JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.
UpdatedIn JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.
UpdatedIn JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.
UpdatedIn JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.
UpdatedIn JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.
Updated- CVE-2021-31898: In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS. Unscored
In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.
Updated In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.
UpdatedA vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All versions < V4.3.7), RUGGEDCOM i803 (All versions < V4.3.7), RUGGEDCOM M2100 (All versions < V4.3.7), RUGGEDCOM M2200 (All versions < V4.3.7), RUGGEDCOM M969 (All versions < V4.3.7), RUGGEDCOM RMC30 (All versions < V4.3.7), RUGGEDCOM RMC8388 V4.X (All versions <
UpdatedA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker co
UpdatedA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could all
UpdatedA vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMERIK Analyze MyPerformance /OEE-Monitor (All versions), SINUMERIK Analyze MyPerformance /OEE-Tuning (All versions), SINUMERIK Integrate Client 02 (All versions >= V02.00.12 < 02.00.18), SINUMERIK Integrate Client 03 (All versions >= V03.00.12 < 03.00.18), SINUME
UpdatedA vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier), Siveillance Control Pro (All versions). The affected application incorrectly neutralizes
Updated