# CVEs published 2021-10-04

96 CVEs were published on October 4, 2021: 2 critical, 16 high. Days are UTC.

- [CVE-2021-42008](https://cve.now/CVE-2021-42008.md): The decode\_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. (no CVSS)
- [CVE-2021-42006](https://cve.now/CVE-2021-42006.md): An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have uns (no CVSS)
- [CVE-2021-41123](https://cve.now/CVE-2021-41123.md): Exposure of Sensitive Information to an Unauthorized Actor in WB.UI.Headquarters.dll (CVSS 5.3, surveysolutions)
- [CVE-2020-21496](https://cve.now/CVE-2020-21496.md): A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar (no CVSS)
- [CVE-2020-21494](https://cve.now/CVE-2020-21494.md): A cross-site scripting (XSS) vulnerability in the component install\\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web (no CVSS)
- [CVE-2020-21495](https://cve.now/CVE-2020-21495.md): A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar (no CVSS)
- [CVE-2020-21493](https://cve.now/CVE-2020-21493.md): An issue in the component route\\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames. (no CVSS)
- [CVE-2020-21434](https://cve.now/CVE-2020-21434.md): Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. (no CVSS)
- [CVE-2021-41089](https://cve.now/CVE-2021-41089.md): \`docker cp\` allows unexpected chmod of host files (CVSS 2.8, moby · github.com/docker/docker +1)
- [CVE-2020-21431](https://cve.now/CVE-2020-21431.md): HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit. (no CVSS)
- [CVE-2021-41091](https://cve.now/CVE-2021-41091.md): Insufficiently restricted permissions on data directory in Docker Engine (CVSS 6.3, moby · github.com/docker/docker +1)
- [CVE-2021-41092](https://cve.now/CVE-2021-41092.md): Docker CLI leaks private registry credentials to registry-1.docker.io (CVSS 5.4, docker cli · github.com/docker/cli)
- [CVE-2020-21387](https://cve.now/CVE-2020-21387.md): A cross-site scripting (XSS) vulnerability in the parameter type\_en of Maccms 10 allows attackers to obtain the administrator cookie and esc (no CVSS)
- [CVE-2020-21386](https://cve.now/CVE-2020-21386.md): A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator priv (no CVSS)
- [CVE-2021-39433](https://cve.now/CVE-2021-39433.md): A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file (no CVSS)
- [CVE-2021-41118](https://cve.now/CVE-2021-41118.md): ReDoS in DynamicPageList3 (CVSS 5.3, Universal-Omega DynamicPageList3)
- [CVE-2021-41100](https://cve.now/CVE-2021-41100.md): Account takeover when having only access to a user's short lived token in wire-server (CVSS 7.4, wireapp wire-server)
- [CVE-2021-41094](https://cve.now/CVE-2021-41094.md): Mandatory encryption at rest can be bypassed (UI) in Wire app (CVSS 4.2, wireapp wire-ios)
- [CVE-2021-41093](https://cve.now/CVE-2021-41093.md): Account takeover when having only access to a user's short lived token (CVSS 7.4, wireapp wire-ios)
- [CVE-2021-41099](https://cve.now/CVE-2021-41099.md): Integer overflow issue with strings in Redis (CVSS 7.5, redis)
- [CVE-2021-41651](https://cve.now/CVE-2021-41651.md): A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. (no CVSS)
- [CVE-2021-32762](https://cve.now/CVE-2021-32762.md): Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms (CVSS 7.5, redis)
- [CVE-2021-32687](https://cve.now/CVE-2021-32687.md): Integer overflow issue with intsets in Redis (CVSS 7.5, redis)
- [CVE-2021-32675](https://cve.now/CVE-2021-32675.md): DoS vulnerability in Redis (CVSS 7.5, redis)
- [CVE-2021-32672](https://cve.now/CVE-2021-32672.md): Vulnerability in Lua Debugger in Redis (CVSS 5.3, redis)
- [CVE-2021-41578](https://cve.now/CVE-2021-41578.md): mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. (no CVSS)
- [CVE-2021-38400](https://cve.now/CVE-2021-38400.md): Use of Password Hash with Insufficient Computational Effort for Boston Scientific Zoom Latitude (CVSS 6.9, Boston Scientific ZOOM LATITUDE)
- [CVE-2021-38396](https://cve.now/CVE-2021-38396.md): Missing Support Integrity Check for Boston Scientific Zoom Latitude (CVSS 6.5, Boston Scientific ZOOM LATITUDE)
- [CVE-2021-32627](https://cve.now/CVE-2021-32627.md): Integer overflow issue with Streams in Redis (CVSS 7.5, redis)
- [CVE-2021-38392](https://cve.now/CVE-2021-38392.md): Improper Access Control for Boston Scientific Zoom Latitude (CVSS 6.5, Boston Scientific ZOOM LATITUDE)
- [CVE-2021-32628](https://cve.now/CVE-2021-32628.md): Vulnerability in handling large ziplists (CVSS 7.5, redis)
- [CVE-2021-38398](https://cve.now/CVE-2021-38398.md): Reliance on Component that is not Updateable for Boston Scientific Zoom Latitude (CVSS 6.5, Boston Scientific ZOOM LATITUDE)
- [CVE-2021-38394](https://cve.now/CVE-2021-38394.md): Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude (CVSS 6.2, Boston Scientific ZOOM LATITUDE)
- [CVE-2021-23857](https://cve.now/CVE-2021-23857.md): Login with hash (CVSS 10.0, Rexroth IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22…)
- [CVE-2021-23855](https://cve.now/CVE-2021-23855.md): Information disclosure (CVSS 8.6, Rexroth IndraMotion MLC IndraMotion XLC)
- [CVE-2021-23858](https://cve.now/CVE-2021-23858.md): Information disclosure (CVSS 8.6, Rexroth IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22…)
- [CVE-2021-41579](https://cve.now/CVE-2021-41579.md): LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. (no CVSS)
- [CVE-2021-23856](https://cve.now/CVE-2021-23856.md): Reflected Cross-Site-Scripting (CVSS 10.0, Rexroth IndraMotion MLC L20, L40)
- [CVE-2021-32626](https://cve.now/CVE-2021-32626.md): Lua scripts can overflow the heap-based Lua stack in Redis (CVSS 7.5, redis)
- [CVE-2021-38618](https://cve.now/CVE-2021-38618.md): In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's (CVSS 7.4)
- [CVE-2021-39347](https://cve.now/CVE-2021-39347.md): Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking (CVSS 4.3, Stripe for WooCommerce)
- [CVE-2020-28119](https://cve.now/CVE-2020-28119.md): Cross site scripting vulnerability in 53KF \< 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into (no CVSS)
- [CVE-2021-41592](https://cve.now/CVE-2021-41592.md): Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure. (no CVSS)
- [CVE-2021-41530](https://cve.now/CVE-2021-41530.md): Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerabilit (no CVSS, Forcepoint Next Generation Firewall)
- [CVE-2021-36850](https://cve.now/CVE-2021-36850.md): WordPress Media File Renamer – Auto & Manual Rename plugin \<= 5.1.9 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Meow Apps Media File Renamer – Auto & Manual Rename)
- [CVE-2021-39868](https://cve.now/CVE-2021-39868.md): In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited repos (CVSS 4.3, GitLab)
- [CVE-2021-41593](https://cve.now/CVE-2021-41593.md): Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure. (no CVSS)
- [CVE-2021-22259](https://cve.now/CVE-2021-22259.md): A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API. (CVSS 4.3, GitLab)
- [CVE-2021-39874](https://cve.now/CVE-2021-39874.md): In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git commands. (CVSS 4.3, GitLab)
- [CVE-2021-39883](https://cve.now/CVE-2021-39883.md): Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from 14.2 before 14.2.5, (CVSS 4.3, GitLab)
- [CVE-2021-41596](https://cve.now/CVE-2021-41596.md): SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. (no CVSS)
- [CVE-2021-39871](https://cve.now/CVE-2021-39871.md): In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed (CVSS 4.3, GitLab)
- [CVE-2021-41591](https://cve.now/CVE-2021-41591.md): ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure. (no CVSS)
- [CVE-2021-39899](https://cve.now/CVE-2021-39899.md): In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change pas (CVSS 2.9, GitLab)
- [CVE-2021-41595](https://cve.now/CVE-2021-41595.md): SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. (no CVSS)
- [CVE-2021-39900](https://cve.now/CVE-2021-39900.md): Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a (CVSS 2.0, GitLab)
- [CVE-2021-39896](https://cve.now/CVE-2021-39896.md): In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may b (CVSS 3.8, GitLab)
- [CVE-2021-39873](https://cve.now/CVE-2021-39873.md): In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visit (CVSS 4.3, GitLab)
- [CVE-2021-39879](https://cve.now/CVE-2021-39879.md): Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable (CVSS 2.2, GitLab)
- [CVE-2021-39877](https://cve.now/CVE-2021-39877.md): A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with (CVSS 7.7, GitLab)
- [CVE-2021-35296](https://cve.now/CVE-2021-35296.md): An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the c (no CVSS)
- [CVE-2021-39885](https://cve.now/CVE-2021-39885.md): A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions starting from 14.2 b (CVSS 8.7, GitLab)
- [CVE-2021-40683](https://cve.now/CVE-2021-40683.md): In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an (no CVSS)
- [CVE-2021-25964](https://cve.now/CVE-2021-25964.md): Stored Cross-Site Scripting (XSS) in Calibre-web via Description Field in Metadata (CVSS 5.4, OzzieIsaacs calibreweb)
- [CVE-2021-41867](https://cve.now/CVE-2021-41867.md): An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of pa (no CVSS, onionshare-cli)
- [CVE-2021-38823](https://cve.now/CVE-2021-38823.md): The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. (no CVSS)
- [CVE-2021-38822](https://cve.now/CVE-2021-38822.md): A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary (no CVSS)
- [CVE-2021-41868](https://cve.now/CVE-2021-41868.md): OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionalit (no CVSS, onionshare-cli)
- [CVE-2021-39486](https://cve.now/CVE-2021-39486.md): A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. (no CVSS)
- [CVE-2021-37777](https://cve.now/CVE-2021-37777.md): Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). (no CVSS)
- [CVE-2021-37333](https://cve.now/CVE-2021-37333.md): Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. (no CVSS)
- [CVE-2021-37331](https://cve.now/CVE-2021-37331.md): Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. (no CVSS)
- [CVE-2021-37330](https://cve.now/CVE-2021-37330.md): Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2021-36051](https://cve.now/CVE-2021-36051.md): XMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution (CVSS 7.8, Adobe XMP Toolkit)
- [CVE-2021-41511](https://cve.now/CVE-2021-41511.md): The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to b (no CVSS)
- [CVE-2021-41878](https://cve.now/CVE-2021-41878.md): A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker (no CVSS)
- [CVE-2021-24687](https://cve.now/CVE-2021-24687.md): Modern Events Calendar Lite \< 5.22.2 - Admin+ Stored Cross-Site Scripting (no CVSS, Modern Events Calendar Lite)
- [CVE-2021-24679](https://cve.now/CVE-2021-24679.md): Bitcoin / AltCoin Payment Gateway for WooCommerce \< 1.6.1 - Reflected Cross-Site Scripting (no CVSS, Bitcoin / AltCoin Payment Gateway for WooCommerce & Multive…)
- [CVE-2021-24678](https://cve.now/CVE-2021-24678.md): CM Tooltip Glossary \< 3.9.21 - Contributor+ Stored Cross-Site Scripting (no CVSS, CM Tooltip Glossary – Better SEO and UEX for your WP site)
- [CVE-2021-24676](https://cve.now/CVE-2021-24676.md): Better Find and Replace \< 1.2.9 - Reflected Cross-Site Scripting (no CVSS, Better Find and Replace)
- [CVE-2021-24673](https://cve.now/CVE-2021-24673.md): Appointment Hour Booking \< 1.3.16 - Authenticated Stored Cross-Site Scripting (no CVSS, Appointment Hour Booking – WordPress Booking Plugin)
- [CVE-2021-24654](https://cve.now/CVE-2021-24654.md): User Registration \< 2.0.2 - Low Privilege Stored Cross-Site Scripting (no CVSS, User Registration – Custom Registration Form, Login And Use…)
- [CVE-2021-24465](https://cve.now/CVE-2021-24465.md): Meow Gallery \< 4.1.9 - Contributor+ SQL Injection (no CVSS, Meow Gallery)
- [CVE-2021-22557](https://cve.now/CVE-2021-22557.md): Code execution in SLO Generator via YAML Payload (CVSS 5.3, Google SLO Generator · slo-generator)
- [CVE-2021-41869](https://cve.now/CVE-2021-41869.md): SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation. (no CVSS)
- [CVE-2021-41322](https://cve.now/CVE-2021-41322.md): Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password res (no CVSS)
- [CVE-2021-41285](https://cve.now/CVE-2021-41285.md): Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. (no CVSS)
- [CVE-2021-40325](https://cve.now/CVE-2021-40325.md): Cobbler before 3.3.0 allows authorization bypass for modification of settings. (no CVSS, cobbler)
- [CVE-2021-40324](https://cve.now/CVE-2021-40324.md): Cobbler before 3.3.0 allows arbitrary file write operations via upload\_log\_data. (no CVSS, cobbler)
- [CVE-2021-40323](https://cve.now/CVE-2021-40323.md): Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template i (no CVSS, cobbler)
- [CVE-2021-21706](https://cve.now/CVE-2021-21706.md): ZipArchive::extractTo may extract outside of destination dir (CVSS 5.3, PHP Group PHP)
- [CVE-2021-21705](https://cve.now/CVE-2021-21705.md): Incorrect URL validation in FILTER\_VALIDATE\_URL (CVSS 4.3, PHP Group PHP)
- [CVE-2021-21704](https://cve.now/CVE-2021-21704.md): Multiple vulnerabilities in Firebird client extension (CVSS 5.0, PHP Group PHP)
- [CVE-2021-41861](https://cve.now/CVE-2021-41861.md): The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than (no CVSS)
- [CVE-2021-32765](https://cve.now/CVE-2021-32765.md): Integer Overflow to Buffer Overflow in Hiredis (CVSS 8.8, hiredis)
- [CVE-2021-41103](https://cve.now/CVE-2021-41103.md): Insufficiently restricted permissions on plugin directories (CVSS 5.9, containerd · github.com/containerd/containerd)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.