CVE-2021-3xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
814 records · Page 2 of 9
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected record- CVE-2021-3885: This is unused. Rejected
This is unused.
Updated · Rejected record DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected record- CVE-2021-3882: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb 5.9 Medium
LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is behind a reverse proxy. By tricking a user to use an unencrypted connection (HTTP), an attacker may be able to obtain the authentication data by capturing network traffic. LedgerSMB 1.8 and newer switched from Basic authentication to using cookie authentication w
Updated libmobi is vulnerable to Out-of-bounds Read
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordsnipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Updated- CVE-2021-3878: Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp 9.8 Critical
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Updated DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordvim is vulnerable to Heap-based Buffer Overflow
Updatedbookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordvim is vulnerable to Heap-based Buffer Overflow
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected record- CVE-2021-3869: Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp 8.6 High
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Updated DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
Updated · Rejected recordCross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6af710438b153d and prior to 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6.
UpdatedA flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a result, if the descendant process crashes and core_pattern is set to a relative value, its core dump is s
Updatedsnipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Updatedicecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
UpdatedThe RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj
UpdatedJFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query.
UpdatedA flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.
Updatedsnipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Updatedchaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
UpdatedClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available.
UpdatedImproper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Liman Central Management System Liman MYS (HTTP/Controllers, CronMail, Jobs modules) allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462.
UpdatedImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Glox Technology Useroam Hotspot allows SQL Injection. This issue affects Useroam Hotspot: before 5.1.0.15.
Updatedchaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Updatedgrowi is vulnerable to Authorization Bypass Through User-Controlled Key
Updatedfirefly-iii is vulnerable to URL Redirection to Untrusted Site
UpdatedAuthentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
UpdatedAn authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.
UpdatedAn arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services could allow a local attacker to create an arbitrary file with higher privileges that could lead to a denial-of-service (DoS) on affected installations. Please note: an attacker must first obtain the ability
UpdatedAn unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.
Updated- CVE-2021-3846: Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii 6.3 Medium
firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type
Updated ws-scrcpy is vulnerable to External Control of File Name or Path
UpdatedRapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session is still valid after the password change, potentially allowing the attacker who originally compromised
UpdatedA potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Updatednltk is vulnerable to Inefficient Regular Expression Complexity
Updatedsylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the user's browser.
UpdatedA dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index (PyPi). MITRE classifies this weakness as an Uncontrolled Search Path Element (CWE-427) in which a private package dependency may be replaced
UpdatedA flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
Updated- CVE-2021-3838: PHAR Deserialization in dompdf/dompdf 9.8 Critical
DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution, especially when DOMPdf is used
Updated openwhyd is vulnerable to Improper Authorization
Updated- CVE-2021-3836: Improper Restriction of XML External Entity Reference in dbeaver/dbeaver 9.8 Critical
dbeaver is vulnerable to Improper Restriction of XML External Entity Reference
Updated Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf
UpdatedIntegria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).
Updated- CVE-2021-3833: Integria IMS incorrect authorization 9.8 Critical
Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.
Updated - CVE-2021-3832: Integria IMS Remote Code Execution 9.8 Critical
Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in order to exploit the vulnerability.
Updated gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Updatedbtcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Updatedopenwhyd is vulnerable to URL Redirection to Untrusted Site
Updatednltk is vulnerable to Inefficient Regular Expression Complexity
UpdatedA flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
UpdatedHeap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
UpdatedOn 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials.
UpdatedOpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
Updated- CVE-2021-3823: Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode 7.1 High
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects: Bitdefender GravityZone versions prior to 3.3.8.249.
Updated jsoneditor is vulnerable to Inefficient Regular Expression Complexity
UpdatedA potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.
Updatedinflect is vulnerable to Inefficient Regular Expression Complexity
Updatedfirefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Updated- CVE-2021-3818: Reliance on Cookies without Validation and Integrity Checking in getgrav/grav 6.3 Medium
grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking
Updated - CVE-2021-3817: SQL Injection in wbce/wbce_cms 9.8 Critical
wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
Updated Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php.
Updatedutils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
UpdatedIt was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.
UpdatedImproper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.
Updatedadminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Updatedadminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Updatedcode-server is vulnerable to Inefficient Regular Expression Complexity
UpdatedPotential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.
UpdatedPotential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.
Updatedansi-regex is vulnerable to Inefficient Regular Expression Complexity
UpdatedA path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write files on the system.
Updatedobject-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Updatedtaro is vulnerable to Inefficient Regular Expression Complexity
Updatednth-check is vulnerable to Inefficient Regular Expression Complexity
UpdatedA vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.
Updatedprism is vulnerable to Inefficient Regular Expression Complexity
UpdatedA flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.
Updated- CVE-2021-3799: Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin 5.4 Medium
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames
Updated A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
Updatedhestiacp is vulnerable to Use of Wrong Operator in String Comparison
Updatedvim is vulnerable to Use After Free
Updatedsemver-regex is vulnerable to Inefficient Regular Expression Complexity
Updatedvuelidate is vulnerable to Inefficient Regular Expression Complexity
UpdatedAn improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware.
UpdatedSome device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker.
UpdatedAn information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.
UpdatedA buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device.
UpdatedAn information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.
UpdatedAn exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device.
UpdatedA vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.
Updated