# CVEs published 2021-09-13

66 CVEs were published on September 13, 2021: 3 critical, 14 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-20672](https://cve.now/CVE-2020-20672.md): An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file. (no CVSS)
- [CVE-2020-20671](https://cve.now/CVE-2020-20671.md): A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account. (no CVSS)
- [CVE-2020-20670](https://cve.now/CVE-2020-20670.md): An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTM (no CVSS)
- [CVE-2021-41033](https://cve.now/CVE-2021-41033.md): In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerable to man-in-the-midd (no CVSS, The Eclipse Foundation Eclipse Equinox)
- [CVE-2021-41054](https://cve.now/CVE-2021-41054.md): tftpd\_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, O (no CVSS)
- [CVE-2021-32139](https://cve.now/CVE-2021-32139.md): The gf\_isom\_vp\_config\_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file (no CVSS)
- [CVE-2021-32138](https://cve.now/CVE-2021-32138.md): The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the (no CVSS)
- [CVE-2021-40824](https://cve.now/CVE-2021-40824.md): A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) bef (no CVSS, org.matrix.android:matrix-android-sdk2)
- [CVE-2021-33362](https://cve.now/CVE-2021-33362.md): Stack buffer overflow in the hevc\_parse\_vps\_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or exec (no CVSS)
- [CVE-2021-40823](https://cve.now/CVE-2021-40823.md): A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix hom (no CVSS, matrix-js-sdk)
- [CVE-2021-3666](https://cve.now/CVE-2021-3666.md): Prototype Pollution in fiznool/body-parser-xml (CVSS 7.6, fiznool/body-parser-xml · body-parser-xml)
- [CVE-2021-24728](https://cve.now/CVE-2021-24728.md): Paid Member Subscriptions \< 2.4.2 - Authenticated SQL Injection (no CVSS, Membership & Content Restriction – Paid Member Subscriptions)
- [CVE-2021-24727](https://cve.now/CVE-2021-24727.md): Block and Stop Bad Bots \< 6.60 - Authenticated SQL Injections (no CVSS, WP Block and Stop Bad Bots Crawlers and Spiders and Anti Sp…)
- [CVE-2021-24726](https://cve.now/CVE-2021-24726.md): WP Simple Booking Calendar \<= 2.0.6 (before 07/12/2021) - Authenticated SQL Injection (no CVSS, WP Simple Booking Calendar)
- [CVE-2021-24725](https://cve.now/CVE-2021-24725.md): Comment Link Remove and Other Comment Tools \< 2.1.6 - Arbitrary Comment Deletion via CSRF (no CVSS, Comment Link Remove and Other Comment Tools)
- [CVE-2021-24724](https://cve.now/CVE-2021-24724.md): Timetable and Event Schedule by MotoPress \< 2.3.19 - Author+ Stored Cross-Site Scripting (no CVSS, Timetable and Event Schedule by MotoPress)
- [CVE-2021-24623](https://cve.now/CVE-2021-24623.md): WordPress Advanced Ticket System \< 1.0.64 - Authenticated Stored Cross-Site Scripting (XSS) (no CVSS, WordPress Advanced Ticket System, Elite Support Helpdesk)
- [CVE-2021-24621](https://cve.now/CVE-2021-24621.md): WP Courses LMS \< 2.0.44 - Authenticated Stored XSS via Video Embed Code (no CVSS, WP Courses LMS)
- [CVE-2021-24620](https://cve.now/CVE-2021-24620.md): Simple eCommerce \<= 2.2.5 - Arbitrary File Upload (no CVSS, WordPress Simple Ecommerce Shopping Cart Plugin- Sell produ…)
- [CVE-2021-24619](https://cve.now/CVE-2021-24619.md): Per Page Add to Head \<= 1.4.4 - Authenticated Stored XSS (no CVSS, Per page add to head)
- [CVE-2021-24614](https://cve.now/CVE-2021-24614.md): Book appointment Online \< 1.39 - Authenticated Stored Cross-Site Scripting (XSS) (no CVSS, Book appointment online)
- [CVE-2021-24605](https://cve.now/CVE-2021-24605.md): Custom Post View Generator \<= 0.4.6 - Reflected Cross-Site Scripting (no CVSS, Custom Post View Generator)
- [CVE-2021-24586](https://cve.now/CVE-2021-24586.md): Per Page Add to Head \< 1.4.4 - CSRF to Stored XSS (no CVSS, Per page add to head)
- [CVE-2021-24560](https://cve.now/CVE-2021-24560.md): Software License Manager \< 4.4.8 - Reflected Cross-Site Scripting (no CVSS, Software License Manager)
- [CVE-2021-24523](https://cve.now/CVE-2021-24523.md): Daily Prayer Time \< 2021.08.10 - Authenticated Stored XSS (no CVSS, Daily Prayer Time)
- [CVE-2021-24510](https://cve.now/CVE-2021-24510.md): MF Gig Calendar \< 1.2 - Reflected Cross-Site Scripting (XSS) (no CVSS, MF Gig Calendar)
- [CVE-2021-24508](https://cve.now/CVE-2021-24508.md): Smash Balloon Social Post Feed \< 2.19.2 - Unauthenticated Stored XSS (no CVSS, Smash Balloon Social Post Feed)
- [CVE-2021-24493](https://cve.now/CVE-2021-24493.md): Shopp eCommerce \<= 1.4 - Unauthenticated Arbitrary File Upload (no CVSS, Shopp)
- [CVE-2021-24491](https://cve.now/CVE-2021-24491.md): Fileviewer \<= 2.2 - Arbitrary File Upload/Deletion via CSRF (no CVSS, Fileviewer)
- [CVE-2021-24490](https://cve.now/CVE-2021-24490.md): Email Artillery \<= 4.1 - Arbitrary File Upload (no CVSS, Email Artillery)
- [CVE-2021-24431](https://cve.now/CVE-2021-24431.md): Language Bar Flags \<= 1.0.8 - CSRF to Stored XSS (no CVSS, Language Bar Flags)
- [CVE-2021-33554](https://cve.now/CVE-2021-33554.md): UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33553](https://cve.now/CVE-2021-33553.md): UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33552](https://cve.now/CVE-2021-33552.md): UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33551](https://cve.now/CVE-2021-33551.md): UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33550](https://cve.now/CVE-2021-33550.md): UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33549](https://cve.now/CVE-2021-33549.md): UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33548](https://cve.now/CVE-2021-33548.md): UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33547](https://cve.now/CVE-2021-33547.md): UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33546](https://cve.now/CVE-2021-33546.md): UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33545](https://cve.now/CVE-2021-33545.md): UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33544](https://cve.now/CVE-2021-33544.md): UDP Technology/Geutebrück camera devices: command injection leading to RCE (CVSS 7.2, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-33543](https://cve.now/CVE-2021-33543.md): UDP Technology/Geutebrück camera devices: Authentication Bypass (CVSS 9.8, Geutebrück E2 Series · Geutebrück Encoder G-Code)
- [CVE-2021-38833](https://cve.now/CVE-2021-38833.md): SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. (no CVSS)
- [CVE-2021-29643](https://cve.now/CVE-2021-29643.md): PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Direc (no CVSS)
- [CVE-2021-32132](https://cve.now/CVE-2021-32132.md): The abst\_box\_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the (no CVSS)
- [CVE-2021-32135](https://cve.now/CVE-2021-32135.md): The trak\_box\_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the (no CVSS)
- [CVE-2021-32137](https://cve.now/CVE-2021-32137.md): Heap buffer overflow in the URL\_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute ar (no CVSS)
- [CVE-2021-32134](https://cve.now/CVE-2021-32134.md): The gf\_odf\_desc\_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in t (no CVSS)
- [CVE-2021-32136](https://cve.now/CVE-2021-32136.md): Heap buffer overflow in the print\_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary c (no CVSS)
- [CVE-2021-22526](https://cve.now/CVE-2021-22526.md): Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 4.9, Micro Focus NetIQ Access Manager)
- [CVE-2021-22524](https://cve.now/CVE-2021-22524.md): Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 5.4, Micro Focus NetIQ Access Manager)
- [CVE-2021-22527](https://cve.now/CVE-2021-22527.md): Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 6.0, Micro Focus NetIQ Access Manager)
- [CVE-2020-27970](https://cve.now/CVE-2020-27970.md): Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar (no CVSS, Yandex Browser Lite for Android)
- [CVE-2020-27969](https://cve.now/CVE-2020-27969.md): Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing (no CVSS, Yandex Browser for Android)
- [CVE-2021-22528](https://cve.now/CVE-2021-22528.md): Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 8.0, Micro Focus NetIQ Access Manager)
- [CVE-2021-40214](https://cve.now/CVE-2021-40214.md): Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component. (no CVSS)
- [CVE-2021-40870](https://cve.now/CVE-2021-40870.md): An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. (CVSS 9.8, KEV)
- [CVE-2021-40867](https://cve.now/CVE-2021-40867.md): Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who u (CVSS 7.8)
- [CVE-2021-40866](https://cve.now/CVE-2021-40866.md): Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) / (CVSS 9.8)
- [CVE-2021-33361](https://cve.now/CVE-2021-33361.md): Memory leak in the afra\_box\_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. (no CVSS)
- [CVE-2021-33363](https://cve.now/CVE-2021-33363.md): Memory leak in the infe\_box\_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. (no CVSS)
- [CVE-2021-33364](https://cve.now/CVE-2021-33364.md): Memory leak in the def\_parent\_box\_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. (no CVSS)
- [CVE-2021-33365](https://cve.now/CVE-2021-33365.md): Memory leak in the gf\_isom\_get\_root\_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. (no CVSS)
- [CVE-2021-33366](https://cve.now/CVE-2021-33366.md): Memory leak in the gf\_isom\_oinf\_read\_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. (no CVSS)
- [CVE-2021-39212](https://cve.now/CVE-2021-39212.md): Issue when Configuring the ImageMagick Security Policy (CVSS 4.4, ImageMagick)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-09-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.