CVE-2021-37xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
681 records · Page 4 of 7
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
UpdatedMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
UpdatedA SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description parameters. The vulnerability can be exploited only when a valid Knowledge Base URL is configured on the Knowledge Base configuration page and points to a MediaWiki instance. This re
UpdatedA SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter.
UpdatedA SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csv_HostGroupLogs.php start and end parameters.
UpdatedTX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled BusyBox utilities (e.g., tar and nc).
UpdatedIn JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.
UpdatedIn JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.
UpdatedIn JetBrains YouTrack before 2021.2.17925, stored XSS was possible.
UpdatedIn JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.
Updated- CVE-2021-37550: In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. Unscored
In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.
Updated - CVE-2021-37549: In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. Unscored
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.
Updated In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.
UpdatedIn JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.
UpdatedIn JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.
UpdatedIn JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.
Updated- CVE-2021-37544: In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization. Unscored
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.
Updated In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects.
UpdatedIn JetBrains TeamCity before 2020.2.3, XSS was possible.
UpdatedIn JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.
UpdatedIn JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.
UpdatedZoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.
UpdatedMultiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the id_category parameter to the controllers/front/category.php category controller.
UpdatedSAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
Updatedapp/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.
Updated- CVE-2021-37533: Apache Commons Net's FTP client trusts the host from PASV response by default 6.5 Medium
Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignor
Updated SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.
UpdatedSAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be accessed by the system and then create a file which will trigger the XSLT engine to execute the script co
UpdatedA denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.
UpdatedA double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).
UpdatedCross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php.
UpdatedSQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db.js, /commands/mute.js, /modules/event/messageDelete.js.
UpdatedBuffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.
UpdatedUniversal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.
UpdatedAn Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.
UpdatedA cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name.
UpdatedCross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.
UpdatedBuffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.
UpdatedDirectory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server.
UpdatedCRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.
UpdatedAn SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.
UpdatedSQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.
UpdatedAn issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function.
UpdatedAn issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function.
UpdatedIn NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitrary sql query execution in the backend database.
UpdatedIn NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which results in arbitrary sql query execution in the backend database.
UpdatedIn NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, which results in arbitrary sql query execution in the backend database.
UpdatedIn NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in arbitrary sql query execution in the backend database.
UpdatedIn NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which results in arbitrary sql query execution in the backend database.
UpdatedCradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line.
UpdatedIn NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.
UpdatedIn NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.
UpdatedNCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
UpdatedIn NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
Updated- CVE-2021-37466: In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected). Unscored
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
Updated - CVE-2021-37465: In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected). Unscored
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
Updated - CVE-2021-37464: In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored). Unscored
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
Updated - CVE-2021-37463: In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored). Unscored
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
Updated Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
UpdatedCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
UpdatedNCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.
UpdatedCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).
UpdatedCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).
UpdatedCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
UpdatedCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
UpdatedIn NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
UpdatedIn NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.
UpdatedIn NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
UpdatedNCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt Autodial function.
UpdatedNCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
UpdatedNCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
UpdatedNCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.
UpdatedNCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
Updated- CVE-2021-37439: NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability. Unscored
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability.
Updated DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Updated · Rejected recordAmazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing personal content via a factory reset. Also, the vendor has reportedly indicated that they are working on
UpdatedAltova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.
UpdatedManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.
UpdatedZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.
UpdatedZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.
UpdatedZoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass.
Updated- CVE-2021-37420: Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing. Unscored
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.
Updated Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-31874. Reason: This candidate is a reservation duplicate of CVE-2021-31874. Notes: All CVE users should reference CVE-2021-31874 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Updated · Rejected recordZoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation.
UpdatedZoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.
UpdatedZoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.
UpdatedZoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.
UpdatedGRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login script does not verify and sanitize user-provided strings.
UpdatedThe TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar.
UpdatedImproper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
Updated- CVE-2021-37405: This is unused. Rejected
This is unused.
Updated · Rejected record