# CVEs published 2021-10-07

70 CVEs were published on October 7, 2021: 3 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-25271](https://cve.now/CVE-2021-25271.md): A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318. (no CVSS, Sophos HitmanPro)
- [CVE-2021-25270](https://cve.now/CVE-2021-25270.md): A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901. (no CVSS, Sophos HitmanPro.Alert)
- [CVE-2021-41115](https://cve.now/CVE-2021-41115.md): Regular expression denial-of-service in Zulip (CVSS 4.3, zulip)
- [CVE-2021-38298](https://cve.now/CVE-2021-38298.md): Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE. (no CVSS)
- [CVE-2020-21729](https://cve.now/CVE-2020-21729.md): JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to (no CVSS)
- [CVE-2020-21726](https://cve.now/CVE-2020-21726.md): OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter. (no CVSS)
- [CVE-2020-21725](https://cve.now/CVE-2020-21725.md): OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter. (no CVSS)
- [CVE-2021-42095](https://cve.now/CVE-2021-42095.md): Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar. (no CVSS)
- [CVE-2020-21865](https://cve.now/CVE-2020-21865.md): ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha. (no CVSS)
- [CVE-2021-42084](https://cve.now/CVE-2021-42084.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42085](https://cve.now/CVE-2021-42085.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42086](https://cve.now/CVE-2021-42086.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42087](https://cve.now/CVE-2021-42087.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42088](https://cve.now/CVE-2021-42088.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42089](https://cve.now/CVE-2021-42089.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42090](https://cve.now/CVE-2021-42090.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42091](https://cve.now/CVE-2021-42091.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42092](https://cve.now/CVE-2021-42092.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42093](https://cve.now/CVE-2021-42093.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-42094](https://cve.now/CVE-2021-42094.md): An issue was discovered in Zammad before 4.1.1. (no CVSS)
- [CVE-2021-41130](https://cve.now/CVE-2021-41130.md): X-Endpoint-API-UserInfo can be spoofed in cloudendpoints Extensible Service Proxy (CVSS 6.4, cloudendpoints esp)
- [CVE-2021-29700](https://cve.now/CVE-2021-29700.md): IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information f (CVSS 4.3, IBM Sterling B2B Integrator)
- [CVE-2021-20584](https://cve.now/CVE-2021-20584.md): IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access control (CVSS 6.5, IBM Sterling File Gateway)
- [CVE-2021-20571](https://cve.now/CVE-2021-20571.md): IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. (CVSS 4.9, IBM Sterling B2B Integrator)
- [CVE-2021-20561](https://cve.now/CVE-2021-20561.md): IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Sterling File Gateway)
- [CVE-2021-20552](https://cve.now/CVE-2021-20552.md): IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical er (CVSS 4.3, IBM Sterling File Gateway)
- [CVE-2021-20489](https://cve.now/CVE-2021-20489.md): IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malic (CVSS 4.3, IBM Sterling File Gateway)
- [CVE-2021-20481](https://cve.now/CVE-2021-20481.md): IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Sterling File Gateway)
- [CVE-2021-20473](https://cve.now/CVE-2021-20473.md): IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated (CVSS 6.3, IBM Sterling File Gateway)
- [CVE-2021-20376](https://cve.now/CVE-2021-20376.md): IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observa (CVSS 4.3, IBM Sterling File Gateway)
- [CVE-2021-20375](https://cve.now/CVE-2021-20375.md): IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user (CVSS 6.5, IBM Sterling File Gateway)
- [CVE-2021-20372](https://cve.now/CVE-2021-20372.md): IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to (CVSS 4.3, IBM Sterling File Gateway)
- [CVE-2021-23447](https://cve.now/CVE-2021-23447.md): Cross-site Scripting (XSS) (CVSS 5.4, teddy)
- [CVE-2021-42071](https://cve.now/CVE-2021-42071.md): In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharacters in the cgi-bin/ (no CVSS)
- [CVE-2021-42013](https://cve.now/CVE-2021-42013.md): Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVSS 9.8, KEV, Apache Software Foundation Apache HTTP Server)
- [CVE-2021-40439](https://cve.now/CVE-2021-40439.md): Billion Laughs (no CVSS, Apache Software Foundation Apache OpenOffice)
- [CVE-2021-28129](https://cve.now/CVE-2021-28129.md): DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid (no CVSS, Apache Software Foundation Apache OpenOffice)
- [CVE-2021-37762](https://cve.now/CVE-2021-37762.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution. (no CVSS)
- [CVE-2021-37919](https://cve.now/CVE-2021-37919.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37920](https://cve.now/CVE-2021-37920.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37921](https://cve.now/CVE-2021-37921.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37923](https://cve.now/CVE-2021-37923.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37924](https://cve.now/CVE-2021-37924.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37922](https://cve.now/CVE-2021-37922.md): Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which allows copying of files from one directory to (no CVSS)
- [CVE-2021-37918](https://cve.now/CVE-2021-37918.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37931](https://cve.now/CVE-2021-37931.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37930](https://cve.now/CVE-2021-37930.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37929](https://cve.now/CVE-2021-37929.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37928](https://cve.now/CVE-2021-37928.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-37926](https://cve.now/CVE-2021-37926.md): Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. (no CVSS)
- [CVE-2021-3834](https://cve.now/CVE-2021-3834.md): Integria IMS vulnerable to Cross Site Scripting (XSS) (CVSS 5.4, Ártica Integria IMS)
- [CVE-2021-3833](https://cve.now/CVE-2021-3833.md): Integria IMS incorrect authorization (CVSS 9.8, Ártica Integria IMS)
- [CVE-2021-40725](https://cve.now/CVE-2021-40725.md): Adobe Acrobat Reader DC AcroForm listbox Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2021-40726](https://cve.now/CVE-2021-40726.md): Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2021-41794](https://cve.now/CVE-2021-41794.md): ogs\_fqdn\_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. (no CVSS)
- [CVE-2021-33903](https://cve.now/CVE-2021-33903.md): In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user via the CLI does not change th (no CVSS)
- [CVE-2021-35067](https://cve.now/CVE-2021-35067.md): Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message c (no CVSS)
- [CVE-2021-28661](https://cve.now/CVE-2021-28661.md): Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass. (no CVSS, silverstripe/graphql)
- [CVE-2021-36150](https://cve.now/CVE-2021-36150.md): SilverStripe Framework through 4.8.1 allows XSS. (no CVSS, silverstripe/admin)
- [CVE-2021-41865](https://cve.now/CVE-2021-41865.md): HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of ser (no CVSS)
- [CVE-2021-22958](https://cve.now/CVE-2021-22958.md): A Server-Side Request Forgery vulnerability was found in concrete5 \< 8.5.5 that allowed a decimal notation encoded IP address to bypass the (no CVSS, https://github.com/concrete5/concrete5 · concrete5/concrete5)
- [CVE-2021-3832](https://cve.now/CVE-2021-3832.md): Integria IMS Remote Code Execution (CVSS 9.8, Ártica Integria IMS)
- [CVE-2021-40978](https://cve.now/CVE-2021-40978.md): The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive infor (no CVSS, mkdocs)
- [CVE-2021-32172](https://cve.now/CVE-2021-32172.md): Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin. (no CVSS)
- [CVE-2021-41770](https://cve.now/CVE-2021-41770.md): Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure. (no CVSS)
- [CVE-2021-42054](https://cve.now/CVE-2021-42054.md): ACCEL-PPP 1.12.0 has an out-of-bounds read in triton\_context\_schedule if the client exits after authentication. (no CVSS)
- [CVE-2021-42053](https://cve.now/CVE-2021-42053.md): The Unicorn framework through 0.35.3 for Django allows XSS via component.name. (no CVSS, django-unicorn)
- [CVE-2021-26557](https://cve.now/CVE-2021-26557.md): When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user (no CVSS, Octopus Deploy Octopus Tentacle)
- [CVE-2021-26556](https://cve.now/CVE-2021-26556.md): When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user us (no CVSS, Octopus Deploy Octopus Server)
- [CVE-2021-22930](https://cve.now/CVE-2021-22930.md): Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory c (no CVSS, NodeJS Node)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-10-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.