CVE-2021-43xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
701 records · Page 6 of 8
Datalust Seq.App.EmailPlus (aka seq-app-htmlemail) 3.1.0-dev-00148, 3.1.0-dev-00170, and 3.1.0-dev-00176 can use cleartext SMTP on port 25 in some cases where encryption on port 465 was intended.
UpdatedIn Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a malicious proxy auto-config (PAC) file, leading to arbitrary code execution. This affects Incydr Basic, Advanced, and Gov F1; CrashPlan Cloud; and CrashPlan for Small Business. (Incydr Professional and Enterprise are unaffected.)
UpdatedAn issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.
UpdatedAn issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.
UpdatedIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution
UpdatedIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element.
UpdatedIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character.
UpdatedCartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a user can add names to their cart, and compose an email. Uploading an attachment for the email stores the attachment on the site in the /tmp_attach/ folder where it can be accessed with a GET request. The
UpdatedLack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft Office Trust Center Spoofing Vulnerability
UpdatedWindows Digital Media Receiver Elevation of Privilege Vulnerability
UpdatedWindows TCP/IP Driver Elevation of Privilege Vulnerability
UpdatedWindows Hyper-V Denial of Service Vulnerability
UpdatedWindows Digital TV Tuner Elevation of Privilege Vulnerability
UpdatedWindows Kernel Information Disclosure Vulnerability
UpdatedVP9 Video Extensions Information Disclosure Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedNTFS Set Short Name Elevation of Privilege Vulnerability
UpdatedWindows Recovery Environment Agent Elevation of Privilege Vulnerability
UpdatedWindows Remote Access Elevation of Privilege Vulnerability
UpdatedWindows Setup Elevation of Privilege Vulnerability
UpdatedMicrosoft Message Queuing Information Disclosure Vulnerability
UpdatedStorage Spaces Controller Information Disclosure Vulnerability
UpdatedWindows Fax Service Remote Code Execution Vulnerability
UpdatedRemote Desktop Client Remote Code Execution Vulnerability
UpdatedWindows Event Tracing Remote Code Execution Vulnerability
UpdatedWindows NTFS Elevation of Privilege Vulnerability
UpdatedWindows NTFS Elevation of Privilege Vulnerability
UpdatedWindows NTFS Elevation of Privilege Vulnerability
UpdatedSymCrypt Denial of Service Vulnerability
UpdatedStorage Spaces Controller Information Disclosure Vulnerability
UpdatedWindows Common Log File System Driver Elevation of Privilege Vulnerability
UpdatedBot Framework SDK Remote Code Execution Vulnerability
Updated- CVE-2021-43224: Windows Common Log File System Driver Information Disclosure Vulnerability 5.5 Medium
Windows Common Log File System Driver Information Disclosure Vulnerability
Updated - CVE-2021-43223: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability 7.8 High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Updated Microsoft Message Queuing Information Disclosure Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
UpdatedMicrosoft Edge for iOS Spoofing Vulnerability
UpdatedDirectX Graphics Kernel File Denial of Service Vulnerability
UpdatedWindows Encrypting File System (EFS) Remote Code Execution Vulnerability
Updated- CVE-2021-43216: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability 6.5 Medium
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
Updated - CVE-2021-43215: iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution 9.8 Critical
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
Updated Web Media Extensions Remote Code Execution Vulnerability
UpdatedWindows 10 Update Assistant Elevation of Privilege Vulnerability
Updated3D Viewer Remote Code Execution Vulnerability
Updated3D Viewer Remote Code Execution Vulnerability
UpdatedWindows Common Log File System Driver Elevation of Privilege Vulnerability
UpdatedA server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages.
UpdatedAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries.
UpdatedA improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions.
UpdatedIn JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly.
UpdatedIn JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.
UpdatedIn JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.
UpdatedIn JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were insufficient.
UpdatedIn JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.
UpdatedIn JetBrains TeamCity before 2021.1.2, stored XSS is possible.
UpdatedIn JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.
UpdatedIn JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible.
Updated- CVE-2021-43195: In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing. Unscored
In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.
Updated In JetBrains TeamCity before 2021.1.2, user enumeration was possible.
UpdatedIn JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is possible.
Updated- CVE-2021-43192: In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible. Unscored
In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.
Updated JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS.
Updated- CVE-2021-43190: In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible. Unscored
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible.
Updated In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.
UpdatedIn JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete.
UpdatedIn JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information.
UpdatedJetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS.
Updated- CVE-2021-43185: JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection. Unscored
JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.
Updated In JetBrains YouTrack before 2021.3.21051, stored XSS is possible.
UpdatedIn JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.
Updated- CVE-2021-43182: In JetBrains Hub before 2021.1.13415, a DoS via user information is possible. Unscored
In JetBrains Hub before 2021.1.13415, a DoS via user information is possible.
Updated In JetBrains Hub before 2021.1.13690, stored XSS is possible.
UpdatedIn JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
Updated · Rejected recordDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
Updated · Rejected recordAs a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interval. CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
UpdatedThe GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and load the correct PHP file to implement the API call. Vulnerable versions of GOautodial do not sanitize the user input that specifies the action. This permits an attacker to execute any PHP source file with a .php extension that is present on
UpdatedThe GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action that routes to other PHP files that implement the various API functions. Vulnerable versions of GOautodial validate the username and password incorrectly, allowing the caller to specify any values for these parameters and successfully authenticate. CVSS:3.1/AV:N
UpdatedNLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to ve
Updated- CVE-2021-43173: Hanging RRDP request Unscored
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP connections, this time-out was only applied to individual read or write operations rather than the comp
Updated NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a CA can choose the RRDP repository it wishes to publish its data in. By continuously generating a new child CA that only consists of another CA using a different RRDP repository, a malicious CA can create a chain of CAs of de-facto infinite
UpdatedImproper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response.
UpdatedA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless.
UpdatedA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.
UpdatedA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose.
UpdatedA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch.
UpdatedA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose.
UpdatedA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the setSessionTime function in /cgi-bin/luci/api/common..
UpdatedIn ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.
UpdatedProjectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.
UpdatedIn ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book.
UpdatedProjectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.
UpdatedCross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Updated · Rejected recordWith certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.
UpdatedAn XML External Entity (XXE) vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput.
UpdatedCross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.
UpdatedSQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login.
Updated