by Kastro CVE-2021-43523 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 693 of 786
mitre
CVE-2021-41081 · mitre
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search.
CVE-2021-42847 · mitre
Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.
CVE-2021-43136 · mitre
An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access t…
CVE-2021-33816 · mitre
The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which sys…
CVE-2021-40521 · mitre
Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
CVE-2021-41080 · mitre
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.
CVE-2021-41833 · mitre
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.
CVE-2021-42002 · mitre
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.
CVE-2021-43466 · mitre
In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execu…
CVE-2020-23873 · mitre
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.
CVE-2020-23874 · mitre
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.
CVE-2021-42774 · mitre
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management…
CVE-2021-43185 · mitre
JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.
CVE-2021-43193 · mitre
In JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is possible.
CVE-2020-23877 · mitre
pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.
CVE-2020-23878 · mitre
pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.
CVE-2021-39303 · mitre
The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352.
CVE-2021-40519 · mitre
Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
CVE-2021-40520 · mitre
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
CVE-2021-43183 · mitre
In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.
CVE-2021-43200 · mitre
In JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were insufficient.
CVE-2021-43572 · mitre
The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or ecdsa-python) before 2.0.1 fails to check that the si…
CVE-2021-43573 · mitre
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10.
CVE-2021-43568 · mitre
The verify function in the Stark Bank Elixir ECDSA library (ecdsa-elixir) 1.0.0 fails to check that the signature is non-zero, which allo…
CVE-2021-43569 · mitre
The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-zero, which allows…
CVE-2021-43570 · mitre
The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to check that the signature is non-zero, which allows a…
CVE-2021-43571 · mitre
The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to check that the signature is non-zero, which allow…
CVE-2021-42775 · mitre
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management…
Palo Alto Networks
Unknown
CVE-2021-24827 · Unknown Asgaros Forum
Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
Apache Software Foundation
CVE-2021-43350 · Apache Software Foundation Apache Traffic Control
LDAP filter injection vulnerability in Traffic Ops
Siemens
CVE-2021-31886 · Siemens APOGEE MBC (PPC) (BACnet)
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE ME…
CVE-2021-31884 · Siemens APOGEE MBC (PPC) (BACnet)
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE ME…
CVE-2021-31889 · Siemens Capital Embedded AR Classic 431-422
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versio…
CVE-2021-31890 · Siemens Capital Embedded AR Classic 431-422
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versio…
CVE-2021-40358 · Siemens SIMATIC PCS 7 V8.2
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS…
CVE-2021-31345 · Siemens Capital Embedded AR Classic 431-422
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versio…
CVE-2021-31346 · Siemens Capital Embedded AR Classic 431-422
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versio…
sroehrl
OpenZeppelin
CVE-2021-41264 · OpenZeppelin openzeppelin-contracts
UUPSUpgradeable vulnerability in OpenZeppelin Contracts
Microsoft
CVE-2021-26443 · Microsoft Windows 10 Version 1809
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Zoom Video Communications Inc
CVE-2021-34422 · Zoom Video Communications Inc Keybase Client for Windows
Path traversal of file names in Keybase Client for Windows
Qualcomm, Inc.
CVE-2021-1975 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snap…
CVE-2021-30321 · Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity…
CVE-2021-1981 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snap…
CVE-2021-30284 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapd…
CVE-2021-1924 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking