# CVEs published 2021-09-07

124 CVEs were published on September 7, 2021: 4 critical, 9 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-19855](https://cve.now/CVE-2020-19855.md): phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image\_zoom.php. (no CVSS)
- [CVE-2020-19853](https://cve.now/CVE-2020-19853.md): BlueCMS v1.6 contains a SQL injection vulnerability via /ad\_js.php. (no CVSS)
- [CVE-2021-37145](https://cve.now/CVE-2021-37145.md): A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attacker (no CVSS)
- [CVE-2020-19767](https://cve.now/CVE-2020-19767.md): A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens from victim users vi (no CVSS)
- [CVE-2020-19769](https://cve.now/CVE-2020-19769.md): A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a (no CVSS)
- [CVE-2020-19768](https://cve.now/CVE-2020-19768.md): A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from victim users via a (no CVSS)
- [CVE-2020-19766](https://cve.now/CVE-2020-19766.md): The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the \_duration variable, compromis (no CVSS)
- [CVE-2020-19765](https://cve.now/CVE-2020-19765.md): An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack. (no CVSS)
- [CVE-2021-32802](https://cve.now/CVE-2021-32802.md): Preview generation used third-party library not suited for user-generated content in Nextcloud server (CVSS 9.3, nextcloud security-advisories)
- [CVE-2021-32801](https://cve.now/CVE-2021-32801.md): Exceptions may have logged Encryption-at-Rest key content in Nextcloud server (CVSS 5.5, nextcloud security-advisories)
- [CVE-2021-32800](https://cve.now/CVE-2021-32800.md): Bypass of Two Factor Authentication in Nextcloud server (CVSS 8.1, nextcloud security-advisories)
- [CVE-2021-32766](https://cve.now/CVE-2021-32766.md): Nextcloud Text app can disclose existence of folders in "File Drop" link share (CVSS 5.3, nextcloud security-advisories)
- [CVE-2021-37629](https://cve.now/CVE-2021-37629.md): Lack of ratelimit on Richdocuments OCS endpoint in nextcloud (CVSS 5.3, nextcloud security-advisories)
- [CVE-2021-37628](https://cve.now/CVE-2021-37628.md): File Drop can be bypassed using Richdocuments app in nextcloud (CVSS 7.5, nextcloud security-advisories)
- [CVE-2021-39501](https://cve.now/CVE-2021-39501.md): EyouCMS 1.5.4 is vulnerable to Open Redirect. (no CVSS)
- [CVE-2021-39500](https://cve.now/CVE-2021-39500.md): Eyoucms 1.5.4 is vulnerable to Directory Traversal. (no CVSS)
- [CVE-2021-32782](https://cve.now/CVE-2021-32782.md): Cross-Site Scripting in Nextcloud Circles (CVSS 5.8, nextcloud security-advisories)
- [CVE-2021-37630](https://cve.now/CVE-2021-37630.md): Secret Circle can be joined without approval in Nextcloud Circles (CVSS 6.5, nextcloud security-advisories)
- [CVE-2021-39499](https://cve.now/CVE-2021-39499.md): A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2021-39497](https://cve.now/CVE-2021-39497.md): eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function. (no CVSS)
- [CVE-2021-39496](https://cve.now/CVE-2021-39496.md): Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into \`filename\` param to trigger Reflected XSS (no CVSS)
- [CVE-2021-39503](https://cve.now/CVE-2021-39503.md): PHPMyWind 5.6 is vulnerable to Remote Code Execution. (no CVSS)
- [CVE-2021-37631](https://cve.now/CVE-2021-37631.md): Circle can be accessed by non-Circle members in Nextcloud Deck (CVSS 6.5, nextcloud security-advisories)
- [CVE-2020-19751](https://cve.now/CVE-2020-19751.md): An issue was discovered in gpac 0.8.0. (no CVSS)
- [CVE-2020-19752](https://cve.now/CVE-2020-19752.md): The find\_color\_or\_error function in gifsicle 1.92 contains a NULL pointer dereference. (no CVSS)
- [CVE-2020-19750](https://cve.now/CVE-2020-19750.md): An issue was discovered in gpac 0.8.0. (no CVSS)
- [CVE-2021-40143](https://cve.now/CVE-2021-40143.md): Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. (no CVSS, org.sonatype.nexus:nexus-repository)
- [CVE-2021-39194](https://cve.now/CVE-2021-39194.md): Denial of service while parsing polymorphic input with tagged polymorphism style in kaml (CVSS 4.3, charleskorn kaml · com.charleskorn.kaml:kaml)
- [CVE-2021-38705](https://cve.now/CVE-2021-38705.md): ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). (no CVSS)
- [CVE-2021-38704](https://cve.now/CVE-2021-38704.md): Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary Ja (no CVSS)
- [CVE-2021-38707](https://cve.now/CVE-2021-38707.md): Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript (no CVSS)
- [CVE-2021-38706](https://cve.now/CVE-2021-38706.md): messages\_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute ar (no CVSS)
- [CVE-2021-35948](https://cve.now/CVE-2021-35948.md): Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protectio (no CVSS)
- [CVE-2021-35946](https://cve.now/CVE-2021-35946.md): A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore ele (no CVSS)
- [CVE-2021-39195](https://cve.now/CVE-2021-39195.md): Server-Side Request Forgery vulnerability in misskey (CVSS 7.7, misskey-dev misskey)
- [CVE-2021-35949](https://cve.now/CVE-2021-35949.md): The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and (no CVSS)
- [CVE-2021-39196](https://cve.now/CVE-2021-39196.md): Authenticated non-privileged user can request unfiltered data without adequate permissions in pcapture (CVSS 7.7, jdhwpgmbca pcapture)
- [CVE-2021-39199](https://cve.now/CVE-2021-39199.md): Cross site scripting via unsafe defaults in remark-html (CVSS 10.0, remarkjs remark-html · remark-html)
- [CVE-2021-35947](https://cve.now/CVE-2021-35947.md): The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username (no CVSS)
- [CVE-2021-39197](https://cve.now/CVE-2021-39197.md): Cross-Site Request Forgery in better\_errors (CVSS 6.3, BetterErrors better\_errors · better\_errors)
- [CVE-2021-38142](https://cve.now/CVE-2021-38142.md): Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. (no CVSS)
- [CVE-2021-38123](https://cve.now/CVE-2021-38123.md): Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05 (no CVSS, Network Automation.)
- [CVE-2021-40539](https://cve.now/CVE-2021-40539.md): Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execu (CVSS 9.8, KEV)
- [CVE-2020-7832](https://cve.now/CVE-2020-7832.md): RAONWIZ DEXT5 Upload remote code execution vulnerability (CVSS 8.8, RAONWIZ DEXT5 Upload)
- [CVE-2020-7865](https://cve.now/CVE-2020-7865.md): Inoguard ExECM CoreB2B solution remote code execution vulnerability (CVSS 8.8, Inoguard ExECM CoreB2B)
- [CVE-2020-7819](https://cve.now/CVE-2020-7819.md): nTracker USB Enterprise SQL-Injection vulnerability (CVSS 9.3, nTrackSystem nTracker USB Enterprise)
- [CVE-2020-19131](https://cve.now/CVE-2020-19131.md): Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop (no CVSS)
- [CVE-2021-27022](https://cve.now/CVE-2021-27022.md): A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logg (no CVSS, Puppet Enterprise)
- [CVE-2021-37731](https://cve.now/CVE-2021-37731.md): A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-39285](https://cve.now/CVE-2021-39285.md): A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. (no CVSS)
- [CVE-2021-37725](https://cve.now/CVE-2021-37725.md): A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softwa (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-37733](https://cve.now/CVE-2021-37733.md): A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prio (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-37729](https://cve.now/CVE-2021-37729.md): A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prio (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-37728](https://cve.now/CVE-2021-37728.md): A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5 (no CVSS, Aruba Operating System Software)
- [CVE-2021-37721](https://cve.now/CVE-2021-37721.md): A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software ver (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-37724](https://cve.now/CVE-2021-37724.md): A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, (no CVSS, Aruba Operating System Software)
- [CVE-2021-37718](https://cve.now/CVE-2021-37718.md): A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software ver (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-33599](https://cve.now/CVE-2021-33599.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.6, F-Secure endpoint protection products on Windows and Mac. F…)
- [CVE-2021-37723](https://cve.now/CVE-2021-37723.md): A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, (no CVSS, Aruba Operating System Software)
- [CVE-2021-37722](https://cve.now/CVE-2021-37722.md): A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software ver (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-37720](https://cve.now/CVE-2021-37720.md): A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software ver (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-37719](https://cve.now/CVE-2021-37719.md): A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software ver (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-37717](https://cve.now/CVE-2021-37717.md): A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software ver (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2019-5318](https://cve.now/CVE-2019-5318.md): A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions (no CVSS, Aruba Operating System Software)
- [CVE-2021-37716](https://cve.now/CVE-2021-37716.md): A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Pri (no CVSS, Aruba SD-WAN Software and Gateways; Aruba Operating System…)
- [CVE-2021-38698](https://cve.now/CVE-2021-38698.md): HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to (no CVSS, github.com/hashicorp/consul)
- [CVE-2020-7877](https://cve.now/CVE-2020-7877.md): ZOOK solution(remote administration tool) buffer overflow vulnerability (CVSS 8.0, mastersoft ZOOKViewer\_Setup.exe · mastersoft ZOOKAgentSetup…)
- [CVE-2021-37218](https://cve.now/CVE-2021-37218.md): HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server (no CVSS, github.com/hashicorp/nomad)
- [CVE-2021-36717](https://cve.now/CVE-2021-36717.md): Synerion TimeNet version 9.21 - Directory Traversal (CVSS 5.4, Synerion TimeNet version)
- [CVE-2021-37219](https://cve.now/CVE-2021-37219.md): HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to acce (no CVSS, github.com/hashicorp/consul)
- [CVE-2021-38616](https://cve.now/CVE-2021-38616.md): In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to inc (CVSS 7.6)
- [CVE-2021-38617](https://cve.now/CVE-2021-38617.md): In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user acc (CVSS 8.8)
- [CVE-2021-38615](https://cve.now/CVE-2021-38615.md): In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, stand (CVSS 6.3)
- [CVE-2021-36696](https://cve.now/CVE-2021-36696.md): Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in social me (no CVSS)
- [CVE-2021-36163](https://cve.now/CVE-2021-36163.md): Unsafe deserialization in providers using the Hessian protocol (no CVSS, Apache Software Foundation Apache Dubbo · org.apache.dubbo:…)
- [CVE-2021-36162](https://cve.now/CVE-2021-36162.md): Unprotected yaml deserialization cause RCE (no CVSS, Apache Software Foundation Apache Dubbo · org.apache.dubbo:…)
- [CVE-2021-31612](https://cve.now/CVE-2021-31612.md): The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greate (no CVSS)
- [CVE-2021-31609](https://cve.now/CVE-2021-31609.md): The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP pack (no CVSS)
- [CVE-2021-28139](https://cve.now/CVE-2021-28139.md): The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an L (no CVSS)
- [CVE-2021-34147](https://cve.now/CVE-2021-34147.md): The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a (no CVSS)
- [CVE-2021-34148](https://cve.now/CVE-2021-34148.md): The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the recepti (no CVSS)
- [CVE-2021-34145](https://cve.now/CVE-2021-34145.md): The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the recepti (no CVSS)
- [CVE-2021-34143](https://cve.now/CVE-2021-34143.md): The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C\_DEMO\_V1.0 does not properly handle the reception of continuous unsolicited (no CVSS)
- [CVE-2021-34146](https://cve.now/CVE-2021-34146.md): The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP res (no CVSS)
- [CVE-2021-34149](https://cve.now/CVE-2021-34149.md): The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP\_AU\_Rand (no CVSS)
- [CVE-2021-31610](https://cve.now/CVE-2021-31610.md): The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allo (no CVSS)
- [CVE-2021-31785](https://cve.now/CVE-2021-31785.md): The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP\_host\_con (no CVSS)
- [CVE-2021-31786](https://cve.now/CVE-2021-31786.md): The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host (no CVSS)
- [CVE-2021-31611](https://cve.now/CVE-2021-31611.md): The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure (no CVSS)
- [CVE-2021-31613](https://cve.now/CVE-2021-31613.md): The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of a truncated LMP pac (no CVSS)
- [CVE-2021-34150](https://cve.now/CVE-2021-34150.md): The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of ov (no CVSS)
- [CVE-2021-28155](https://cve.now/CVE-2021-28155.md): The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses (no CVSS)
- [CVE-2021-28135](https://cve.now/CVE-2021-28135.md): The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited L (no CVSS)
- [CVE-2021-34144](https://cve.now/CVE-2021-34144.md): The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LM (no CVSS)
- [CVE-2021-28136](https://cve.now/CVE-2021-28136.md): The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capabili (no CVSS)
- [CVE-2021-39279](https://cve.now/CVE-2021-39279.md): Certain MOXA devices allow Authenticated Command Injection via /forms/web\_importTFTP. (no CVSS)
- [CVE-2021-39278](https://cve.now/CVE-2021-39278.md): Certain MOXA devices allow reflected XSS via the Config Import menu. (no CVSS)
- [CVE-2021-38841](https://cve.now/CVE-2021-38841.md): Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the system\_info page i (no CVSS)
- [CVE-2021-38840](https://cve.now/CVE-2021-38840.md): SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the water\_refilling/classes/Login.php username parameter (no CVSS)
- [CVE-2021-33831](https://cve.now/CVE-2021-33831.md): api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Control. (no CVSS)
- [CVE-2021-33484](https://cve.now/CVE-2021-33484.md): An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. (no CVSS)
- [CVE-2021-33483](https://cve.now/CVE-2021-33483.md): An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. (no CVSS)
- [CVE-2021-40540](https://cve.now/CVE-2021-40540.md): ulfius\_uri\_logger in Ulfius HTTP Framework before 2.7.4 omits con\_info initialization and a con\_info-\>request NULL check for certain malform (no CVSS)
- [CVE-2021-33285](https://cve.now/CVE-2021-33285.md): In NTFS-3G versions \< 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs\_get\_attribute\_value, a heap buffer (CVSS 6.7)
- [CVE-2021-33286](https://cve.now/CVE-2021-33286.md): In NTFS-3G versions \< 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and a (no CVSS)
- [CVE-2021-33287](https://cve.now/CVE-2021-33287.md): In NTFS-3G versions \< 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs\_attr\_pread\_i, a heap buffer overflow c (CVSS 6.7)
- [CVE-2021-33289](https://cve.now/CVE-2021-33289.md): In NTFS-3G versions \< 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allo (no CVSS)
- [CVE-2021-35266](https://cve.now/CVE-2021-35266.md): In NTFS-3G versions \< 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur (no CVSS)
- [CVE-2021-35267](https://cve.now/CVE-2021-35267.md): NTFS-3G versions \< 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execu (no CVSS)
- [CVE-2021-35268](https://cve.now/CVE-2021-35268.md): In NTFS-3G versions \< 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs\_inode\_real\_open, a heap buffer overflow (CVSS 6.7)
- [CVE-2021-35269](https://cve.now/CVE-2021-35269.md): NTFS-3G versions \< 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs\_attr\_setup\_flag, a heap buf (no CVSS)
- [CVE-2021-39251](https://cve.now/CVE-2021-39251.md): A crafted NTFS image can cause a NULL pointer dereference in ntfs\_extent\_inode\_open in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39252](https://cve.now/CVE-2021-39252.md): A crafted NTFS image can cause an out-of-bounds read in ntfs\_ie\_lookup in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39253](https://cve.now/CVE-2021-39253.md): A crafted NTFS image can cause an out-of-bounds read in ntfs\_runlists\_merge\_i in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39254](https://cve.now/CVE-2021-39254.md): A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs\_attr\_record\_resi (CVSS 6.7)
- [CVE-2021-39255](https://cve.now/CVE-2021-39255.md): A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs\_attr\_find\_in\_attrdef, in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39256](https://cve.now/CVE-2021-39256.md): A crafted NTFS image can cause a heap-based buffer overflow in ntfs\_inode\_lookup\_by\_name in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39257](https://cve.now/CVE-2021-39257.md): A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs\_attr\_pwrite), causin (no CVSS)
- [CVE-2021-39258](https://cve.now/CVE-2021-39258.md): A crafted NTFS image can cause out-of-bounds reads in ntfs\_attr\_find and ntfs\_external\_attr\_find in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39259](https://cve.now/CVE-2021-39259.md): A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs\_inode\_lookup\_by\_name, in NTFS-3G (CVSS 6.7)
- [CVE-2021-39260](https://cve.now/CVE-2021-39260.md): A crafted NTFS image can cause an out-of-bounds access in ntfs\_inode\_sync\_standard\_information in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39261](https://cve.now/CVE-2021-39261.md): A crafted NTFS image can cause a heap-based buffer overflow in ntfs\_compressed\_pwrite in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39262](https://cve.now/CVE-2021-39262.md): A crafted NTFS image can cause an out-of-bounds access in ntfs\_decompress in NTFS-3G \< 2021.8.22. (CVSS 6.7)
- [CVE-2021-39263](https://cve.now/CVE-2021-39263.md): A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs\_get\_attribute\_value, in NTFS-3G \< (CVSS 6.7)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-09-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.