# CVEs published 2021-11-04

65 CVEs were published on November 4, 2021: 4 critical, 7 high. Days are UTC.

- [CVE-2021-39898](https://cve.now/CVE-2021-39898.md): In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the pr (CVSS 3.7, GitLab)
- [CVE-2021-39905](https://cve.now/CVE-2021-39905.md): An information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user to see basic information on private groups (CVSS 4.3, GitLab)
- [CVE-2021-39911](https://cve.now/CVE-2021-39911.md): An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14. (CVSS 1.7, GitLab)
- [CVE-2021-39907](https://cve.now/CVE-2021-39907.md): A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. (CVSS 5.3, GitLab)
- [CVE-2021-39904](https://cve.now/CVE-2021-39904.md): An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions s (CVSS 4.3, GitLab)
- [CVE-2021-39895](https://cve.now/CVE-2021-39895.md): In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project export so when an un (CVSS 6.0, GitLab)
- [CVE-2021-22260](https://cve.now/CVE-2021-22260.md): A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all (CVSS 7.7, GitLab)
- [CVE-2021-39901](https://cve.now/CVE-2021-39901.md): In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoin (CVSS 2.7, GitLab)
- [CVE-2021-39913](https://cve.now/CVE-2021-39913.md): Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14 (CVSS 4.4, GitLab)
- [CVE-2021-39897](https://cve.now/CVE-2021-39897.md): Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent gro (CVSS 2.6, GitLab)
- [CVE-2021-39912](https://cve.now/CVE-2021-39912.md): A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. (CVSS 5.3, GitLab)
- [CVE-2021-39906](https://cve.now/CVE-2021-39906.md): Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the vic (CVSS 8.7, GitLab)
- [CVE-2021-39909](https://cve.now/CVE-2021-39909.md): Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 before 14.2.6, all ve (CVSS 5.3, GitLab)
- [CVE-2021-39903](https://cve.now/CVE-2021-39903.md): In all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility level of a group or a (CVSS 6.5, GitLab)
- [CVE-2021-39902](https://cve.now/CVE-2021-39902.md): Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the severity of an incident (CVSS 4.3, GitLab)
- [CVE-2021-39914](https://cve.now/CVE-2021-39914.md): A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of r (CVSS 3.1, GitLab)
- [CVE-2021-42057](https://cve.now/CVE-2021-42057.md): Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. (no CVSS, obsidian-dataview)
- [CVE-2021-41248](https://cve.now/CVE-2021-41248.md): XSS vulnerability in GraphiQL (CVSS 7.1, graphql graphiql · graphiql)
- [CVE-2021-43398](https://cve.now/CVE-2021-43398.md): Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). (no CVSS)
- [CVE-2021-41249](https://cve.now/CVE-2021-41249.md): XSS vulnerability in GraphQL Playground (CVSS 7.1, graphql-playground · graphql-playground-react)
- [CVE-2021-43396](https://cve.now/CVE-2021-43396.md): In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\\0' character via (no CVSS)
- [CVE-2020-21139](https://cve.now/CVE-2020-21139.md): EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admi (no CVSS)
- [CVE-2021-43389](https://cve.now/CVE-2021-43389.md): An issue was discovered in the Linux kernel before 5.14.15. (no CVSS)
- [CVE-2021-43293](https://cve.now/CVE-2021-43293.md): Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Se (no CVSS)
- [CVE-2021-43281](https://cve.now/CVE-2021-43281.md): MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. (no CVSS)
- [CVE-2021-41247](https://cve.now/CVE-2021-41247.md): incomplete logout in JupyterHub (CVSS 3.5, jupyterhub)
- [CVE-2021-21698](https://cve.now/CVE-2021-21698.md): Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller fr (no CVSS, Jenkins project Jenkins Subversion Plugin · org.jenkins-ci.…)
- [CVE-2021-21697](https://cve.now/CVE-2021-21697.md): Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21696](https://cve.now/CVE-2021-21696.md): Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the libs/ directory inside build directories wh (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21695](https://cve.now/CVE-2021-21695.md): FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earl (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21694](https://cve.now/CVE-2021-21694.md): FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get\*DiskSpace do not check any permissions in (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21692](https://cve.now/CVE-2021-21692.md): FilePath#renameTo and FilePath#moveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21691](https://cve.now/CVE-2021-21691.md): Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS 2. (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21690](https://cve.now/CVE-2021-21690.md): Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21689](https://cve.now/CVE-2021-21689.md): FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access control in Jenkins 2.318 and earlier, LTS 2.303.2 and e (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21688](https://cve.now/CVE-2021-21688.md): The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not reject a (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21687](https://cve.now/CVE-2021-21687.md): Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a sym (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21686](https://cve.now/CVE-2021-21686.md): File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do not canonicalize pa (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21685](https://cve.now/CVE-2021-21685.md): Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create parent directories in FilePath#mkdirs (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-1500](https://cve.now/CVE-2021-1500.md): Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability (CVSS 5.4, Cisco Webex Video Mesh)
- [CVE-2021-34701](https://cve.now/CVE-2021-34701.md): Cisco Unified Communications Products Path Traversal Vulnerability (CVSS 4.3, Cisco Unity Connection)
- [CVE-2021-34731](https://cve.now/CVE-2021-34731.md): Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Prime Access Registrar)
- [CVE-2021-34739](https://cve.now/CVE-2021-34739.md): Cisco Small Business Series Switches Session Credentials Replay Vulnerability (CVSS 8.1, Cisco Small Business Smart and Managed Switches)
- [CVE-2021-34741](https://cve.now/CVE-2021-34741.md): Cisco Email Security Appliance Denial of Service Vulnerability (CVSS 7.5, Cisco Email Security Appliance)
- [CVE-2021-34784](https://cve.now/CVE-2021-34784.md): Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Prime Infrastructure)
- [CVE-2021-40126](https://cve.now/CVE-2021-40126.md): Cisco Umbrella Email Enumeration Vulnerability (CVSS 4.3, Cisco Umbrella Insights Virtual Appliance)
- [CVE-2021-40124](https://cve.now/CVE-2021-40124.md): Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability (CVSS 6.7, Cisco AnyConnect Secure Mobility Client)
- [CVE-2021-40120](https://cve.now/CVE-2021-40120.md): Cisco Small Business RV Series Routers Command Injection Vulnerability (CVSS 6.5, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-40119](https://cve.now/CVE-2021-40119.md): Cisco Policy Suite Static SSH Keys Vulnerability (CVSS 9.8, Cisco Policy Suite (CPS) Software)
- [CVE-2021-40115](https://cve.now/CVE-2021-40115.md): Cisco Webex Video Mesh Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Webex Video Mesh)
- [CVE-2021-40113](https://cve.now/CVE-2021-40113.md): Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities (CVSS 10.0, Cisco Catalyst PON Series)
- [CVE-2021-40112](https://cve.now/CVE-2021-40112.md): Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities (CVSS 10.0, Cisco Catalyst PON Series)
- [CVE-2021-34795](https://cve.now/CVE-2021-34795.md): Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities (CVSS 10.0, Cisco Catalyst PON Series)
- [CVE-2021-34774](https://cve.now/CVE-2021-34774.md): Cisco Common Services Platform Collector Information Disclosure Vulnerability (CVSS 4.9, Cisco Common Services Platform Collector Software)
- [CVE-2021-34773](https://cve.now/CVE-2021-34773.md): Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability (CVSS 6.5, Cisco Unified Communications Manager)
- [CVE-2021-40128](https://cve.now/CVE-2021-40128.md): Cisco Webex Meetings Email Content Injection Vulnerability (CVSS 5.3, Cisco Webex Meetings)
- [CVE-2021-40127](https://cve.now/CVE-2021-40127.md): Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability (CVSS 5.3, Cisco Small Business Smart and Managed Switches)
- [CVE-2021-42624](https://cve.now/CVE-2021-42624.md): A local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c through the tmp variable, where a crafted paylo (no CVSS)
- [CVE-2020-25368](https://cve.now/CVE-2020-25368.md): A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. (no CVSS)
- [CVE-2020-25366](https://cve.now/CVE-2020-25366.md): An issue in the component /cgi-bin/upload\_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) (no CVSS)
- [CVE-2020-25367](https://cve.now/CVE-2020-25367.md): A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. (no CVSS)
- [CVE-2021-34597](https://cve.now/CVE-2021-34597.md): Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability (CVSS 7.8, Phoenix Contact PC Worx)
- [CVE-2021-34594](https://cve.now/CVE-2021-34594.md): Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server (CVSS 6.5, Beckhoff Automation TwinCAT OPC UA Server)
- [CVE-2021-21693](https://cve.now/CVE-2021-21693.md): When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-43400](https://cve.now/CVE-2021-43400.md): An issue was discovered in gatt-database.c in BlueZ 5.61. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.