3995 matches found
CVE-2021-21206
CVE-2021-21206 is a use-after-free in Blink (Chrome) leading to potential heap corruption via a crafted HTML page. Affected product: Google Chrome (Blink engine). Root cause: use-after-free in rendering engine prior to 89.0.4389.128. Impact per sources: high severity with network attack vector, u...
CVE-2021-21220
CVE-2021-21220 is a V8 heap‑corruption risk in Google Chrome (Chromium-based) due to insufficient validation of untrusted input. Affected are Chrome versions prior to 89.0.4389.128; Chrome/Chromium updates fixed to 89.0.4389.128. Connected advisories note exploitation in the wild and attribution ...
CVE-2021-25899
Void Aural Rec Monitor 9.0.0.1 contains a SQL injection in svc-login.php (param1) exploitable via blind time-based requests. An unauthenticated attacker can trigger the vulnerability to potentially read data, modify data, and perform unauthorized administrative actions. No exploit details are pro...
CVE-2021-22205
CVE-2021-22205 affects GitLab CE/EE from version 11.9 onward. The root cause is improper validation of image files handed to a file parser, which can lead to remote code execution on the affected GitLab server. Public advisories summarize that exploitation delivers remote code execution through c...
CVE-2021-22204
CVE-2021-22204 : ExifTool versions 7.44 and later are vulnerable to arbitrary code execution when parsing a malicious image due to improper neutralization of user data in the DjVu file format. Several connected sources confirm this remote code execution vector within ExifTool’s handling of DjVu c...
CVE-2021-22893
CVE-2021-22893 affects Pulse Connect Secure (PCS) 9.0R3/9.1R1 and later. The flaw is an authentication bypass exposed via the Windows File Share Browser and Pulse Secure Collaboration features, allowing an unauthenticated attacker to achieve remote code execution on the PCS gateway. Public source...
SQL Injection Vulnerability in Panmicro e-cology (CNVD-2021-33202)
Panmicro e-cology is designed for large and medium-sized enterprises to make the OA office system, support PC, mobile and WeChat office at the same time. A SQL injection vulnerability exists in Panmicro e-cology. Attackers can use this vulnerability to obtain sensitive information...
CVE-2021-20023
The CVE-2021-20023 entry affects SonicWall Email Security (version 10.0.9.x). Connected advisories describe a directory traversal/path traversal vulnerability that, when exploited by a post-authenticated attacker, could allow reading arbitrary files on the remote host. Evidence from advisories an...
CVE-2021-3493
Summary: CVE-2021-3493 is a Linux kernel overlayfs privilege-escalation issue where overlayfs does not properly validate file capabilities against user namespaces, enabling local privilege escalation on systems using unprivileged user namespaces with Ubuntu overlay patches. The vulnerability is r...
CVE-2020-36195
CVE-2020-36195 is a SQL injection affecting QNAP NAS, specifically Multimedia Console and the Media Streaming Add-on. The vulnerability can lead to information disclosure without authentication over the network. Affected versions and fixes per sources: QTS 4.3.3: Media Streaming add-on 430.1.8.10...
CVE-2020-2509
CVE-2020-2509 is a remote command injection affecting QNAP QTS and QuTS hero. The vulnerability could allow an attacker to execute arbitrary commands within a vulnerable application. According to multiple sources, patches are available in the following releases: QTS 4.5.2.1566 Build 20210202 and ...
CVE-2021-27691
CVE-2021-27691 is a command injection vulnerability in Tenda G0 routers (firmware v15.11.0.6(9039)_CN, v15.11.0.5(5876)_CN) and Tenda G1/G3 routers (firmware v15.11.0.17(9502)_CN, v15.11.0.16(9024)_CN). The root cause is the formSetDebugCfg function, which passes untrusted input to glibc's system...
CVE-2021-21087
Adobe ColdFusion is affected by CVE-2021-21087: an Improper Neutralization of Input During Web Page Generation (XSS) in CF2016 (before 2016u17), CF2018 (before 2018u11), and CF2021 (before 2021u1). The vulnerability allows an attacker to execute arbitrary JavaScript in the context of the current ...
CVE-2021-27850
CVE-2021-27850 is a critical, unauthenticated RCE affecting all recent Apache Tapestry versions up to 5.7.0. The issue is a bypass of the CVE-2019-0195 fix: an attacker can retrieve AppModule.class via crafted asset/file URLs, leaking the HMAC secret key used to sign serialized Java objects. The ...
CVE-2021-28480
CVE-2021-28480 is an Microsoft Exchange Server Remote Code Execution vulnerability. Connected sources confirm it affects Exchange Server (2013/2016/2019) via a remote RCE with network access and no user interaction, indicating a pre-auth exploitation vector. Public PoCs/exploits exist in HoneyPoC...
CVE-2021-28310
CVE-2021-28310 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Project Zero’s 2021 review notes Win32k 0-day activity among in-the-wild exploits, with CVE-2021-28310 listed as one of the Windows 0-days targeted in 2021 (alongside other Win32k issues). The CVE entry is suppo...
CVE-2021-29425
CVE-2021-29425 affects Apache Commons IO up to version 2.6, specifically FileNameUtils.normalize. With inputs such as "//../foo" or "\..\foo", normalization can yield a value that does not escape to higher directories, potentially enabling access to the parent directory if the resulting path is u...
CVE-2021-27905
CVE-2021-27905 (Solr SSRF) affects Apache Solr versions prior to 8.8.2 where the ReplicationHandler’s masterUrl/leaderUrl parameter can be abused to trigger SSRF. The flaw arises because masterUrl is not sufficiently validated against allowed hosts/schemes, enabling an attacker to cause the serve...
CVE-2021-29003
CVE-2021-29003 affects Genexis PLATINUM 4410 firmware 2.1 (P4410-V2-1.28). The vulnerability enables remote code execution by passing shell metacharacters to sys_config_valid.xgi (example: exeshell=%60telnetd%20%26%60). Public references describe the issue as a remote command injection in the rou...