CVEs

413,980 total · page 4918 of 8,280

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-44480	Wokka Lokka Q50	Hig	0.53	8.1	0.01	Dec 1, 2021	Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers (who know the SIM phone number and password) to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords.
CVE-2021-43687	Chamilo Chamilo	Med	0.40	6.1	0.01	Dec 1, 2021	chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie.
CVE-2021-43685	Libretime Libretime Hv	Cri	0.64	9.8	0.01	Dec 1, 2021	libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function.
CVE-2021-26334	AMD uprof	Cri	0.64	9.9	0.01	Dec 1, 2021	The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.
CVE-2021-20611	Mitsubishielectric MELSEC L Series L02/06/26CPU(-P)	Hig	0.49	7.5	0.03	Dec 1, 2021	Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series…
CVE-2021-20610	Mitsubishielectric MELIPC Series MI5122-VW	Hig	0.49	7.5	0.03	Dec 1, 2021	Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series…
CVE-2021-20609	Mitsubishielectric MELSEC L Series L02/06/26CPU	Hig	0.49	7.5	0.03	Dec 1, 2021	Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R…
CVE-2020-10627	Insulet Omnipod Insulin Management System	Hig	0.47	7.3	0.00	Dec 1, 2021	Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or…
CVE-2021-44479	Nxp Kinetis K82 Firmware	Med	0.40	6.1	0.00	Dec 1, 2021	NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.
CVE-2021-43689	Manage Project Manage	Med	0.40	6.1	0.01	Dec 1, 2021	manage (last update Oct 24, 2017) is affected by a Cross Site Scripting (XSS) vulnerability in Application/Home/Controller/GoodsController.class.php. The exit function will terminate the script and print a message which have values from $_POST.
CVE-2021-40154	Nxp LPC55S69	Med	0.40	6.1	0.01	Dec 1, 2021	NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.
CVE-2021-44279	Librenms Librenms	Med	0.40	6.1	0.01	Dec 1, 2021	Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php.
CVE-2021-44277	Librenms Librenms	Med	0.40	6.1	0.01	Dec 1, 2021	Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php.
CVE-2021-25967	Ckan Ckan	Med	0.28	5.4	0.01	Dec 1, 2021	In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged application users to store malicious scripts in their profile picture. These scripts are executed in a victim’s browser when…
CVE-2021-44280	Attendance Management System Project Attendance Management System	Cri	0.64	9.8	0.02	Dec 1, 2021	attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.
CVE-2021-43690	Yurunproxy Project Yurunproxy	Med	0.40	6.1	0.01	Dec 1, 2021	YurunProxy v0.01 is affected by a Cross Site Scripting (XSS) vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socket_read.
CVE-2021-3983	Kimai2 Project Kimai2	Med	0.33	6.1	0.01	Dec 1, 2021	kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3964	Elgg Elgg	Med	0.31	5.9	0.01	Dec 1, 2021	elgg is vulnerable to Authorization Bypass Through User-Controlled Key
CVE-2021-32592	Fortinet Forticlient	Hig	0.51	7.8	0.00	Dec 1, 2021	An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search…
CVE-2021-4017	ShowDoc ShowDoc	Hig	0.50	8.8	0.01	Dec 1, 2021	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4015	Firefly Iii Firefly Iii	Med	0.21	4.3	0.00	Dec 1, 2021	firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3994	django-helpdesk django-helpdesk	Cri	0.56	9.6	0.01	Dec 1, 2021	django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3993	ShowDoc ShowDoc	Med	0.35	6.5	0.01	Dec 1, 2021	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3992	Kimai2 Project Kimai2	Med	0.35	6.5	0.01	Dec 1, 2021	kimai2 is vulnerable to Improper Access Control
CVE-2021-3990	ShowDoc ShowDoc	Med	0.35	6.5	0.01	Dec 1, 2021	showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-3989	ShowDoc ShowDoc	Med	0.33	6.1	0.01	Dec 1, 2021	showdoc is vulnerable to URL Redirection to Untrusted Site
CVE-2021-3985	Kimai Kimai2	Cri	0.52	9.0	0.01	Dec 1, 2021	kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3984	Vim Vim	Hig	0.51	7.8	0.02	Dec 1, 2021	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4019	Vim Vim	Hig	0.51	7.8	0.02	Dec 1, 2021	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4018	Snipeitapp Snipe It	Med	0.28	5.4	0.01	Dec 1, 2021	snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34599	Codesys Git	Hig	0.48	7.4	0.00	Dec 1, 2021	Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the…
CVE-2021-20864	ELECOM CO.,LTD. WRC-2533GST2	Hig	0.57	8.8	0.01	Dec 1, 2021	Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20863	ELECOM CO.,LTD. WRC-2533GST2	Hig	0.52	8.0	0.01	Dec 1, 2021	OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03…
CVE-2021-20862	ELECOM CO.,LTD. WRC-2533GST2	Med	0.28	4.3	0.00	Dec 1, 2021	Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20861	ELECOM CO.,LTD. WRC-2533GST2	Hig	0.57	8.8	0.00	Dec 1, 2021	Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20860	ELECOM CO.,LTD. WRC-2533GST2	Hig	0.57	8.8	0.01	Dec 1, 2021	Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior,…
CVE-2021-20859	ELECOM CO.,LTD. WRC-2533GST2	Hig	0.52	8.0	0.01	Dec 1, 2021	ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware…
CVE-2021-20858	ELECOM CO.,LTD. WRC-2533GHBK-I	Med	0.35	5.4	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20857	ELECOM CO.,LTD. WRC-2533GHBK-I	Med	0.35	5.4	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20856	ELECOM CO.,LTD. WRH-733GBK	Med	0.35	5.4	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20855	ELECOM CO.,LTD. WRH-733GBK	Med	0.35	5.4	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20854	ELECOM CO.,LTD. Wrh 733gbk Firmware	Med	0.44	6.8	0.00	Dec 1, 2021	ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20853	ELECOM CO.,LTD. WRH-733GBK	Med	0.44	6.8	0.00	Dec 1, 2021	ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20852	ELECOM CO.,LTD. WRH-733GBK	Med	0.44	6.8	0.00	Dec 1, 2021	Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors.
CVE-2021-20851	Browser And Operating System Finder Project Browser And Operating System Finder	Hig	0.57	8.8	0.01	Dec 1, 2021	Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors.
CVE-2021-20847	Nttdocomo Wi-Fi STATION SH-52A	Med	0.40	6.1	0.01	Dec 1, 2021	Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.
CVE-2021-43360	Sun Corporation Ehrd	Hig	0.57	8.8	0.02	Dec 1, 2021	Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services.
CVE-2021-43359	Sun Corporation Ehrd	Hig	0.57	8.8	0.02	Dec 1, 2021	Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.
CVE-2021-43358	Sun Corporation Ehrd	Hig	0.49	7.5	0.02	Dec 1, 2021	Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.
CVE-2021-40809	Jamf Jamf	Hig	0.57	8.8	0.01	Dec 1, 2021	An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows.

CVE-2021-44480HigDec 1, 2021
Wokka Lokka
Q50
risk 0.53cvss 8.1epss 0.01
Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers (who know the SIM phone number and password) to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords.
CVE-2021-43687MedDec 1, 2021
Chamilo
Chamilo
risk 0.40cvss 6.1epss 0.01
chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie.
CVE-2021-43685CriDec 1, 2021
Libretime
Libretime Hv
risk 0.64cvss 9.8epss 0.01
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function.
CVE-2021-26334CriDec 1, 2021
AMD
uprof
risk 0.64cvss 9.9epss 0.01
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.
CVE-2021-20611HigDec 1, 2021
Mitsubishielectric
MELSEC L Series L02/06/26CPU(-P)
risk 0.49cvss 7.5epss 0.03
Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series…
CVE-2021-20610HigDec 1, 2021
Mitsubishielectric
MELIPC Series MI5122-VW
risk 0.49cvss 7.5epss 0.03
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series…
CVE-2021-20609HigDec 1, 2021
Mitsubishielectric
MELSEC L Series L02/06/26CPU
risk 0.49cvss 7.5epss 0.03
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R…
CVE-2020-10627HigDec 1, 2021
Insulet
Omnipod Insulin Management System
risk 0.47cvss 7.3epss 0.00
Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or…
CVE-2021-44479MedDec 1, 2021
Nxp
Kinetis K82 Firmware
risk 0.40cvss 6.1epss 0.00
NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.
CVE-2021-43689MedDec 1, 2021
Manage Project
Manage
risk 0.40cvss 6.1epss 0.01
manage (last update Oct 24, 2017) is affected by a Cross Site Scripting (XSS) vulnerability in Application/Home/Controller/GoodsController.class.php. The exit function will terminate the script and print a message which have values from $_POST.
CVE-2021-40154MedDec 1, 2021
Nxp
LPC55S69
risk 0.40cvss 6.1epss 0.01
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.
CVE-2021-44279MedDec 1, 2021
Librenms
Librenms
risk 0.40cvss 6.1epss 0.01
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php.
CVE-2021-44277MedDec 1, 2021
Librenms
Librenms
risk 0.40cvss 6.1epss 0.01
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php.
CVE-2021-25967MedDec 1, 2021
Ckan
Ckan
risk 0.28cvss 5.4epss 0.01
In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged application users to store malicious scripts in their profile picture. These scripts are executed in a victim’s browser when…
CVE-2021-44280CriDec 1, 2021
Attendance Management System Project
Attendance Management System
risk 0.64cvss 9.8epss 0.02
attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.
CVE-2021-43690MedDec 1, 2021
Yurunproxy Project
Yurunproxy
risk 0.40cvss 6.1epss 0.01
YurunProxy v0.01 is affected by a Cross Site Scripting (XSS) vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socket_read.
CVE-2021-3983MedDec 1, 2021
Kimai2 Project
Kimai2
risk 0.33cvss 6.1epss 0.01
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3964MedDec 1, 2021
Elgg
Elgg
risk 0.31cvss 5.9epss 0.01
elgg is vulnerable to Authorization Bypass Through User-Controlled Key
CVE-2021-32592HigDec 1, 2021
Fortinet
Forticlient
risk 0.51cvss 7.8epss 0.00
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search…
CVE-2021-4017HigDec 1, 2021
ShowDoc
ShowDoc
risk 0.50cvss 8.8epss 0.01
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4015MedDec 1, 2021
Firefly Iii
Firefly Iii
risk 0.21cvss 4.3epss 0.00
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3994CriDec 1, 2021
django-helpdesk
django-helpdesk
risk 0.56cvss 9.6epss 0.01
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3993MedDec 1, 2021
ShowDoc
ShowDoc
risk 0.35cvss 6.5epss 0.01
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-3992MedDec 1, 2021
Kimai2 Project
Kimai2
risk 0.35cvss 6.5epss 0.01
kimai2 is vulnerable to Improper Access Control
CVE-2021-3990MedDec 1, 2021
ShowDoc
ShowDoc
risk 0.35cvss 6.5epss 0.01
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-3989MedDec 1, 2021
ShowDoc
ShowDoc
risk 0.33cvss 6.1epss 0.01
showdoc is vulnerable to URL Redirection to Untrusted Site
CVE-2021-3985CriDec 1, 2021
Kimai
Kimai2
risk 0.52cvss 9.0epss 0.01
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3984HigDec 1, 2021
Vim
Vim
risk 0.51cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4019HigDec 1, 2021
Vim
Vim
risk 0.51cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4018MedDec 1, 2021
Snipeitapp
Snipe It
risk 0.28cvss 5.4epss 0.01
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34599HigDec 1, 2021
Codesys
Git
risk 0.48cvss 7.4epss 0.00
Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the…
CVE-2021-20864HigDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.57cvss 8.8epss 0.01
Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20863HigDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.52cvss 8.0epss 0.01
OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03…
CVE-2021-20862MedDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.28cvss 4.3epss 0.00
Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20861HigDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.57cvss 8.8epss 0.00
Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20860HigDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.57cvss 8.8epss 0.01
Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior,…
CVE-2021-20859HigDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.52cvss 8.0epss 0.01
ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware…
CVE-2021-20858MedDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GHBK-I
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20857MedDec 1, 2021
ELECOM CO.,LTD.
WRC-2533GHBK-I
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20856MedDec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20855MedDec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20854MedDec 1, 2021
ELECOM CO.,LTD.
Wrh 733gbk Firmware
risk 0.44cvss 6.8epss 0.00
ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20853MedDec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.44cvss 6.8epss 0.00
ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20852MedDec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.44cvss 6.8epss 0.00
Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors.
CVE-2021-20851HigDec 1, 2021
Browser And Operating System Finder Project
Browser And Operating System Finder
risk 0.57cvss 8.8epss 0.01
Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors.
CVE-2021-20847MedDec 1, 2021
Nttdocomo
Wi-Fi STATION SH-52A
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.
CVE-2021-43360HigDec 1, 2021
Sun Corporation
Ehrd
risk 0.57cvss 8.8epss 0.02
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services.
CVE-2021-43359HigDec 1, 2021
Sun Corporation
Ehrd
risk 0.57cvss 8.8epss 0.02
Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.
CVE-2021-43358HigDec 1, 2021
Sun Corporation
Ehrd
risk 0.49cvss 7.5epss 0.02
Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.
CVE-2021-40809HigDec 1, 2021
Jamf
Jamf
risk 0.57cvss 8.8epss 0.01
An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows.