# CVEs published 2021-03-10

102 CVEs were published on March 10, 2021: 0 critical, 2 high. Days are UTC.

- [CVE-2021-27918](https://cve.now/CVE-2021-27918.md): encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF (no CVSS, stdlib)
- [CVE-2021-21375](https://cve.now/CVE-2021-21375.md): Crash in receiving updated SDP answer after initial SDP negotiation failed (CVSS 6.5, pjsip pjproject)
- [CVE-2020-15260](https://cve.now/CVE-2020-15260.md): Existing TLS connections can be reused without checking remote hostname (CVSS 6.8, pjsip pjproject)
- [CVE-2021-21371](https://cve.now/CVE-2021-21371.md): Execution of untrusted code through config file (CVSS 5.0, tenable integration-jira-cloud · tenable-jira-cloud)
- [CVE-2021-21334](https://cve.now/CVE-2021-21334.md): environment variable leak (CVSS 6.3, containerd · github.com/containerd/containerd)
- [CVE-2021-21265](https://cve.now/CVE-2021-21265.md): October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers (CVSS 6.8, octobercms october · october/backend)
- [CVE-2020-35233](https://cve.now/CVE-2020-35233.md): The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force (no CVSS)
- [CVE-2020-35231](https://cve.now/CVE-2020-35231.md): The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attac (no CVSS)
- [CVE-2020-35230](https://cve.now/CVE-2020-35230.md): Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. (no CVSS)
- [CVE-2020-35229](https://cve.now/CVE-2020-35229.md): The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated (no CVSS)
- [CVE-2021-3034](https://cve.now/CVE-2021-3034.md): Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs (CVSS 5.1, Palo Alto Networks Cortex XSOAR)
- [CVE-2020-35228](https://cve.now/CVE-2020-35228.md): A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote atta (no CVSS)
- [CVE-2020-35227](https://cve.now/CVE-2020-35227.md): A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web pane (no CVSS)
- [CVE-2020-35226](https://cve.now/CVE-2020-35226.md): NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding (no CVSS)
- [CVE-2020-35225](https://cve.now/CVE-2020-35225.md): The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters (no CVSS)
- [CVE-2020-35224](https://cve.now/CVE-2020-35224.md): A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unau (no CVSS)
- [CVE-2020-35223](https://cve.now/CVE-2020-35223.md): The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed b (no CVSS)
- [CVE-2020-35221](https://cve.now/CVE-2020-35221.md): The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, (no CVSS)
- [CVE-2020-19419](https://cve.now/CVE-2020-19419.md): Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from t (no CVSS)
- [CVE-2020-19417](https://cve.now/CVE-2020-19417.md): Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks (no CVSS)
- [CVE-2021-1640](https://cve.now/CVE-2021-1640.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-20205](https://cve.now/CVE-2021-20205.md): Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cra (no CVSS, Libjpeg-turbo)
- [CVE-2021-0465](https://cve.now/CVE-2021-0465.md): In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2021-0464](https://cve.now/CVE-2021-0464.md): In sound\_trigger\_event\_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0463](https://cve.now/CVE-2021-0463.md): In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. (no CVSS, Android)
- [CVE-2021-0462](https://cve.now/CVE-2021-0462.md): In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. (no CVSS, Android)
- [CVE-2021-0461](https://cve.now/CVE-2021-0461.md): In iaxxx\_core\_sensor\_change\_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0460](https://cve.now/CVE-2021-0460.md): In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. (no CVSS, Android)
- [CVE-2021-0459](https://cve.now/CVE-2021-0459.md): In fts\_driver\_test\_write of fts\_proc.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0458](https://cve.now/CVE-2021-0458.md): In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. (no CVSS, Android)
- [CVE-2021-0457](https://cve.now/CVE-2021-0457.md): In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0456](https://cve.now/CVE-2021-0456.md): In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0455](https://cve.now/CVE-2021-0455.md): In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0454](https://cve.now/CVE-2021-0454.md): In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0453](https://cve.now/CVE-2021-0453.md): In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. (no CVSS, Android)
- [CVE-2021-0452](https://cve.now/CVE-2021-0452.md): In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. (no CVSS, Android)
- [CVE-2021-0451](https://cve.now/CVE-2021-0451.md): In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. (no CVSS, Android)
- [CVE-2021-0450](https://cve.now/CVE-2021-0450.md): In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. (no CVSS, Android)
- [CVE-2021-0449](https://cve.now/CVE-2021-0449.md): In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. (no CVSS, Android)
- [CVE-2021-0389](https://cve.now/CVE-2021-0389.md): In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. (no CVSS, Android)
- [CVE-2021-0388](https://cve.now/CVE-2021-0388.md): In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. (no CVSS, Android)
- [CVE-2021-0387](https://cve.now/CVE-2021-0387.md): In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. (no CVSS, Android)
- [CVE-2021-0386](https://cve.now/CVE-2021-0386.md): In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. (no CVSS, Android)
- [CVE-2021-0385](https://cve.now/CVE-2021-0385.md): In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi (no CVSS, Android)
- [CVE-2021-0383](https://cve.now/CVE-2021-0383.md): In done of CaptivePortalLoginActivity.java, there is a confused deputy. (no CVSS, Android)
- [CVE-2021-0382](https://cve.now/CVE-2021-0382.md): In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. (no CVSS, Android)
- [CVE-2021-0381](https://cve.now/CVE-2021-0381.md): In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2021-0380](https://cve.now/CVE-2021-0380.md): In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing p (no CVSS, Android)
- [CVE-2021-0379](https://cve.now/CVE-2021-0379.md): In getUpTo17bits of pvmp3\_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0378](https://cve.now/CVE-2021-0378.md): In getNbits of pvmp3\_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0377](https://cve.now/CVE-2021-0377.md): In DeltaPerformer::Write of delta\_performer.cc, there is a possible use of untrusted input due to improper input validation. (no CVSS, Android)
- [CVE-2021-0376](https://cve.now/CVE-2021-0376.md): In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions byp (no CVSS, Android)
- [CVE-2021-0375](https://cve.now/CVE-2021-0375.md): In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default v (no CVSS, Android)
- [CVE-2021-0374](https://cve.now/CVE-2021-0374.md): In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0372](https://cve.now/CVE-2021-0372.md): In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2021-0371](https://cve.now/CVE-2021-0371.md): In nci\_proc\_rf\_management\_ntf of nci\_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0370](https://cve.now/CVE-2021-0370.md): In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0369](https://cve.now/CVE-2021-0369.md): In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT\_ACROSS\_PROFILES grant state not displaying proper (no CVSS, Android)
- [CVE-2021-0368](https://cve.now/CVE-2021-0368.md): In oggpack\_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0025](https://cve.now/CVE-2020-0025.md): In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a permissions bypass. (no CVSS, Android)
- [CVE-2021-24030](https://cve.now/CVE-2021-24030.md): The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. (no CVSS, Facebook Gameroom)
- [CVE-2020-1921](https://cve.now/CVE-2020-1921.md): In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within t (no CVSS, Facebook HHVM)
- [CVE-2021-24025](https://cve.now/CVE-2021-24025.md): Due to incorrect string size calculations inside the preg\_quote function, a large input string passed to the function can trigger an integer (no CVSS, Facebook HHVM)
- [CVE-2020-1919](https://cve.now/CVE-2020-1919.md): Incorrect bounds calculations in substr\_compare could lead to an out-of-bounds read when the second string argument passed in is longer than (no CVSS, Facebook HHVM)
- [CVE-2020-1917](https://cve.now/CVE-2020-1917.md): xbuf\_format\_converter, used as part of exif\_read\_data, was appending a terminating null character to the generated string, but was not using (no CVSS, Facebook HHVM)
- [CVE-2020-1918](https://cve.now/CVE-2020-1918.md): In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory pri (no CVSS, Facebook HHVM)
- [CVE-2020-1916](https://cve.now/CVE-2020-1916.md): An incorrect size calculation in ldap\_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bou (no CVSS, Facebook HHVM)
- [CVE-2021-0399](https://cve.now/CVE-2021-0399.md): In qtaguid\_untag of xt\_qtaguid.c, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2021-0392](https://cve.now/CVE-2021-0392.md): In main of main.cpp, there is a possible memory corruption due to a double free. (no CVSS, Android)
- [CVE-2021-0390](https://cve.now/CVE-2021-0390.md): In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission (no CVSS, Android)
- [CVE-2021-0397](https://cve.now/CVE-2021-0397.md): In sdp\_copy\_raw\_data of sdp\_discovery.cc, there is a possible system compromise due to a double free. (no CVSS, Android)
- [CVE-2021-0398](https://cve.now/CVE-2021-0398.md): In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. (no CVSS, Android)
- [CVE-2021-0391](https://cve.now/CVE-2021-0391.md): In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due t (no CVSS, Android)
- [CVE-2021-0394](https://cve.now/CVE-2021-0394.md): In android\_os\_Parcel\_readString8 of android\_os\_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0395](https://cve.now/CVE-2021-0395.md): In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2021-0393](https://cve.now/CVE-2021-0393.md): In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2021-0396](https://cve.now/CVE-2021-0396.md): In Builtins::Generate\_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an inc (no CVSS, Android)
- [CVE-2021-20265](https://cve.now/CVE-2021-20265.md): A flaw was found in the way memory resources were freed in the unix\_stream\_recvmsg function in the Linux kernel when a signal was pending. (no CVSS, kernel)
- [CVE-2020-5016](https://cve.now/CVE-2020-5016.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. (CVSS 5.3, IBM WebSphere Application Server)
- [CVE-2020-4717](https://cve.now/CVE-2020-4717.md): A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary (CVSS 6.2, IBM SPSS Modeler)
- [CVE-2021-28122](https://cve.now/CVE-2021-28122.md): A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. (no CVSS)
- [CVE-2020-35752](https://cve.now/CVE-2020-35752.md): Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter. (no CVSS)
- [CVE-2021-21491](https://cve.now/CVE-2021-21491.md): SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow (CVSS 4.7, SAP SE SAP NetWeaver Application Server Java)
- [CVE-2021-3224](https://cve.now/CVE-2021-3224.md): A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter. (no CVSS)
- [CVE-2020-28705](https://cve.now/CVE-2020-28705.md): FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3. (no CVSS)
- [CVE-2020-24791](https://cve.now/CVE-2020-24791.md): FUEL CMS 1.4.8 allows SQL injection via the 'fuel\_replace\_id' parameter in pages/replace/1. (no CVSS)
- [CVE-2020-23722](https://cve.now/CVE-2020-23722.md): An issue was discovered in FUEL CMS 1.4.7. (no CVSS)
- [CVE-2020-23721](https://cve.now/CVE-2020-23721.md): An issue was discovered in FUEL CMS V1.4.7. (no CVSS)
- [CVE-2021-28007](https://cve.now/CVE-2021-28007.md): Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter. (no CVSS)
- [CVE-2021-20673](https://cve.now/CVE-2021-20673.md): Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote authenticated at (no CVSS, WESEEK GROWI)
- [CVE-2021-20671](https://cve.now/CVE-2021-20671.md): Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite t (no CVSS, WESEEK GROWI)
- [CVE-2021-20672](https://cve.now/CVE-2021-20672.md): Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v (no CVSS, WESEEK GROWI)
- [CVE-2021-20670](https://cve.now/CVE-2021-20670.md): Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's perso (no CVSS, WESEEK GROWI)
- [CVE-2021-20669](https://cve.now/CVE-2021-20669.md): Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbi (no CVSS, WESEEK GROWI)
- [CVE-2021-20667](https://cve.now/CVE-2021-20667.md): Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI versions v4.2.2 and earlier (no CVSS, WESEEK GROWI)
- [CVE-2021-20668](https://cve.now/CVE-2021-20668.md): Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via (no CVSS, WESEEK GROWI)
- [CVE-2020-13936](https://cve.now/CVE-2020-13936.md): Velocity Sandbox Bypass (no CVSS, Apache Software Foundation Apache Velocity Engine · org.… +1)
- [CVE-2020-13959](https://cve.now/CVE-2020-13959.md): Velocity Tools XSS Vulnerability (no CVSS, Apache Software Foundation Apache Velocity Tools · org.a… +1)
- [CVE-2021-3310](https://cve.now/CVE-2021-3310.md): Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. (no CVSS)
- [CVE-2020-29238](https://cve.now/CVE-2020-29238.md): An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information whe (no CVSS)
- [CVE-2020-27632](https://cve.now/CVE-2020-27632.md): In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. (no CVSS)
- [CVE-2021-21772](https://cve.now/CVE-2021-21772.md): A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. (CVSS 8.1, 3MF)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-03-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.