by Kastro CVE-2021-44790 · Apache Software Foundation Apache HTTP Server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 687 of 786
Apache Software Foundation
bookstackapp
CVE-2021-4119 · bookstackapp bookstackapp/bookstack
Improper Access Control in bookstackapp/bookstack
mitre
CVE-2021-41560 · mitre
OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php.
CVE-2021-45092 · mitre
Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath param…
CVE-2021-44653 · mitre
Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability.
CVE-2021-44655 · mitre
Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability.
CVE-2021-44675 · mitre
Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter byp…
CVE-2021-44676 · mitre
Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a f…
CVE-2021-43439 · mitre
RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely
CVE-2021-44525 · mitre
Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in wh…
CVE-2021-44732 · mitre
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
CVE-2021-45255 · mitre
The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks.
CVE-2021-44350 · mitre
SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php.
CVE-2021-45252 · mitre
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage…
CVE-2021-45253 · mitre
The id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks.
CVE-2021-41844 · mitre
Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.
CVE-2021-42216 · mitre
A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.
CVE-2020-18078 · mitre
A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.
CVE-2021-42945 · mitre
A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php.
snyk
FatPipe
Microsoft
CVE-2021-42311 · Microsoft Microsoft Defender for IoT
Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2021-42313 · Microsoft Microsoft Defender for IoT
Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2021-43217 · Microsoft Windows 10 Version 1809
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
CVE-2021-43907 · Microsoft Visual Studio Code WSL Extension
Visual Studio Code WSL Extension Remote Code Execution Vulnerability
CVE-2021-43215 · Microsoft Windows 10 Version 1809
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
CVE-2021-43225 · Microsoft Bot Framework SDK for .NET Framework
Bot Framework SDK Remote Code Execution Vulnerability
CVE-2021-43882 · Microsoft Microsoft Defender for IoT
Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2021-43899 · Microsoft Microsoft 4K Wireless Display Adapter
Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability
CVE-2021-42310 · Microsoft Microsoft Defender for IoT
Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2021-43905 · Microsoft Office app
Microsoft Office app Remote Code Execution Vulnerability
CVE-2021-43214 · Microsoft Raw Image Extension
Web Media Extensions Remote Code Execution Vulnerability
Oxilab
CVE-2021-36888 · Oxilab Image Hover Effects Ultimate (WordPress plugin)
WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise
Unknown
CVE-2021-24849 · Unknown WCFM Marketplace – Best Multivendor Marketplace for WooCommerce
WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection
Chain Sea Information Integration Co., Ltd
CVE-2021-44164 · Chain Sea Information Integration Co., Ltd ai chatbot system
Chain Sea Information Integration Co., Ltd ai chatbot system - Arbitrary File Upload
google_android
CVE-2021-0889 · google_android
In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow.
CVE-2021-0956 · google_android
In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2021-39645 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A
CVE-2021-39641 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A
CVE-2021-39644 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A
CVE-2021-39655 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A
Hillrom
CVE-2021-43935 · Hillrom Welch Allyn Q-Stress Cardiac Stress Testing System