CVE-2021-34xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
748 records · Page 5 of 8
- CVE-2021-34573: Incorrect calculation in Enbra EWM does not report backflows or no flow events 6.2 Medium
In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.
Updated - CVE-2021-34572: Insufficient Verification of Data Authenticity in Enbra EWM (replay attack) 6.5 Medium
Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.
Updated Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.
Updated- CVE-2021-34570: Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS 7.5 High
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Updated In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
Updated- CVE-2021-34568: WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling 7.5 High
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.
Updated In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service and an limited out-of-bounds read.
UpdatedIn WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.
Updated- CVE-2021-34565: In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found 9.8 Critical
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
Updated Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.
UpdatedIn PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.
UpdatedIn PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.
UpdatedIn PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
UpdatedIn PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
UpdatedIn PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.
UpdatedThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
UpdatedXScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outputs.
UpdatedIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
UpdatedOpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.
UpdatedSonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request) without having been granted access.
UpdatedPillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
UpdatedPHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.
UpdatedAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor
UpdatedAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data. Consequently. an attacker can trigger the use of an attacker-chosen circuit ID to cause algorithm inefficiency.
UpdatedAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream.
UpdatedPRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation.
UpdatedAn unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to file" feature. To accomplish this, the attacker can navigate to cmd.exe.
UpdatedAn issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
UpdatedThe web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Bas
UpdatedAdvantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.
UpdatedAn issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executable path can be set. The result is that high-privileged users can trigger code execution.
UpdatedApache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.
UpdatedWindows Bluetooth Driver Elevation of Privilege Vulnerability
UpdatedWindows Storage Spaces Controller Elevation of Privilege Vulnerability
UpdatedRemote Desktop Client Remote Code Execution Vulnerability
UpdatedWindows MSHTML Platform Remote Code Execution Vulnerability
Updated- CVE-2021-34533: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability 7.8 High
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Updated ASP.NET Core and Visual Studio Information Disclosure Vulnerability
UpdatedWindows Graphics Component Remote Code Execution Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedA remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE July 7, 2021: The security update for
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedMicrosoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
UpdatedMicrosoft Exchange Server Elevation of Privilege Vulnerability
UpdatedMicrosoft Defender Remote Code Execution Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Information Disclosure Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedWin32k Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Storage Spaces Controller Elevation of Privilege Vulnerability
UpdatedWindows Storage Spaces Controller Elevation of Privilege Vulnerability
UpdatedWindows Installer Elevation of Privilege Vulnerability
UpdatedWindows Storage Spaces Controller Elevation of Privilege Vulnerability
UpdatedStorage Spaces Controller Information Disclosure Vulnerability
UpdatedWindows Kernel Remote Code Execution Vulnerability
UpdatedWindows Remote Assistance Information Disclosure Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
UpdatedWindows Address Book Remote Code Execution Vulnerability
UpdatedMicrosoft Windows Media Foundation Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedWindows DNS Server Denial of Service Vulnerability
UpdatedWindows GDI Elevation of Privilege Vulnerability
UpdatedWindows MSHTML Platform Remote Code Execution Vulnerability
UpdatedWindows GDI Information Disclosure Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows Partition Management Driver Elevation of Privilege Vulnerability
UpdatedWindows Certificate Spoofing Vulnerability
UpdatedWin32k Information Disclosure Vulnerability
UpdatedWindows TCP/IP Driver Denial of Service Vulnerability
UpdatedDirectWrite Remote Code Execution Vulnerability
UpdatedWindows Console Driver Elevation of Privilege Vulnerability
UpdatedWindows Event Tracing Elevation of Privilege Vulnerability
UpdatedWindows Event Tracing Elevation of Privilege Vulnerability
Updated.NET Core and Visual Studio Information Disclosure Vulnerability
UpdatedWindows User Profile Service Elevation of Privilege Vulnerability
UpdatedWindows Print Spooler Elevation of Privilege Vulnerability
UpdatedA remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE August 10, 2021: Microsoft has comple
UpdatedScripting Engine Memory Corruption Vulnerability
UpdatedMicrosoft Visual Studio Spoofing Vulnerability
UpdatedMicrosoft Office Remote Code Execution Vulnerability
UpdatedVisual Studio Code .NET Runtime Elevation of Privilege Vulnerability
UpdatedBowser.sys Denial of Service Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Updated- CVE-2021-34474: Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability 8.0 High
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Updated Microsoft Exchange Server Remote Code Execution Vulnerability
UpdatedMicrosoft Defender Elevation of Privilege Vulnerability
UpdatedMicrosoft Exchange Server Elevation of Privilege Vulnerability
UpdatedMicrosoft Office Security Feature Bypass Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedWindows Hello Security Feature Bypass Vulnerability
UpdatedMicrosoft Defender Remote Code Execution Vulnerability
UpdatedWindows AppX Deployment Extensions Elevation of Privilege Vulnerability
Updated- CVE-2021-34461: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Updated Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Updated