by Kastro CVE-2021-44228 · Apache Software Foundation Apache Log4j2
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 688 of 786
Apache Software Foundation
Zoho
mitre
CVE-2021-44152 · mitre
An issue was discovered in Reprise RLM 14.2.
CVE-2021-43113 · mitre
iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the g…
CVE-2021-44514 · mitre
OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories.
CVE-2021-44847 · mitre
A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an…
CVE-2021-27983 · mitre
Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.
CVE-2021-35978 · mitre
An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR.
CVE-2021-40883 · mitre
A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.
CVE-2021-31746 · mitre
Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory travers…
CVE-2021-43117 · mitre
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.
CVE-2021-43608 · mitre
Doctrine DBAL 3.x before 3.1.4 allows SQL Injection.
CVE-2021-44538 · mitre
The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow.
CVE-2021-44966 · mitre
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php.
CVE-2021-37934 · mitre
Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterprise before 3.10.14…
CVE-2021-43703 · mitre
An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php.
CVE-2021-44041 · mitre
UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the UR…
CVE-2021-44833 · mitre
The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.
CVE-2021-44042 · mitre
An issue was discovered in UiPath Assistant 21.4.4.
CVE-2021-44949 · mitre
glFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php.
CVE-2021-45014 · mitre
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26
CVE-2021-45015 · mitre
taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.
CVE-2021-44935 · mitre
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php.
Unknown
CVE-2021-24946 · Unknown Modern Events Calendar Lite
Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection
CVE-2021-24857 · Unknown ToTop Link
ToTop Link <= 1.7.1 - Unauthenticated PHP Object Injection
CVE-2021-24863 · Unknown WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots
StopBadBots < 6.67 - Unauthenticated SQL Injection
CVE-2021-24951 · Unknown LearnPress – WordPress LMS Plugin
LearnPress < 4.1.4 - Admin+ SQL Injection
CVE-2021-24922 · Unknown Pixel Cat – Conversion Pixel Manager
Pixel Cat Lite < 2.6.2 - CSRF to Stored Cross-Site Scripting
RegistrationMagic
CVE-2021-4073 · RegistrationMagic RegistrationMagic
RegistrationMagic <= 5.0.1.7 Authentication Bypass
snyk
ether
IBM
CVE-2021-39065 · IBM Spectrum Copy Data Management
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by…
CVE-2021-38917 · IBM PowerVM Hypervisor
IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary…
CVE-2021-39052 · IBM Spectrum Copy Data Management
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization.
CVE-2021-39063 · IBM Spectrum Protect Plus
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out…
BlackBerry
CVE-2021-32024 · BlackBerry QNX Software Development Platform (SDP)
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to poten…
Siemens
CVE-2021-44524 · Siemens SiPass integrated V2.76
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated…
CVE-2021-44523 · Siemens SiPass integrated V2.76
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated…
ABB
SAP SE
CVE-2021-42064 · SAP SE SAP Commerce
If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SA…
CVE-2021-44231 · SAP SE SAP ABAP Server & ABAP Platform (Translation Tools)
Internally used text extraction reports allow an attacker to inject code that can be executed by the application.
dbeaver
CVE-2021-3836 · dbeaver dbeaver/dbeaver