# CVEs published 2021-11-19

72 CVEs were published on November 19, 2021: 5 critical, 17 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-39198](https://cve.now/CVE-2021-39198.md): The disqualify lead action may be executed without CSRF token check (CVSS 4.2, oroinc crm · oro/crm)
- [CVE-2021-41280](https://cve.now/CVE-2021-41280.md): OS command injection in Sharetribe Go (CVSS 9.8, sharetribe)
- [CVE-2021-23433](https://cve.now/CVE-2021-23433.md): Prototype Pollution (CVSS 5.9, algoliasearch-helper)
- [CVE-2021-40391](https://cve.now/CVE-2021-40391.md): An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and (CVSS 10.0, Gerbv)
- [CVE-2021-26248](https://cve.now/CVE-2021-26248.md): Philips MRI 1.5T and 3T Incorrect Ownership Assignment (CVSS 5.9, Philips MRI)
- [CVE-2021-42744](https://cve.now/CVE-2021-42744.md): Philips MRI 1.5T and 3T Information Exposure (CVSS 5.9, Philips MRI)
- [CVE-2021-26262](https://cve.now/CVE-2021-26262.md): Philips MRI 1.5T and 3T Improper Access Control (CVSS 5.9, Philips MRI)
- [CVE-2021-44038](https://cve.now/CVE-2021-44038.md): An issue was discovered in Quagga through 1.2.4. (no CVSS)
- [CVE-2021-36884](https://cve.now/CVE-2021-36884.md): WordPress Backup Migration plugin \<= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Backupbliss Backup Migration)
- [CVE-2021-43555](https://cve.now/CVE-2021-43555.md): mySCADA myDESIGNER (CVSS 7.3, mySCADA myDESIGNER)
- [CVE-2021-22968](https://cve.now/CVE-2021-22968.md): A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concrete (no CVSS, https://github.com/concrete5/concrete5 · concrete5/core)
- [CVE-2021-22967](https://cve.now/CVE-2021-22967.md): In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allows Unauthenticated User to Access Restricted Files If Allowed to Add Message to (no CVSS, https://github.com/concrete5/concrete5 · concrete5/core)
- [CVE-2021-22965](https://cve.now/CVE-2021-22965.md): A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a ma (no CVSS, Pulse Connect Secure)
- [CVE-2021-22951](https://cve.now/CVE-2021-22951.md): Unauthorized individuals could view password protected files using view\_inline in Concrete CMS (previously concrete 5) prior to version 8.5. (no CVSS, https://github.com/concrete5/concrete5 · concrete5/core)
- [CVE-2021-22966](https://cve.now/CVE-2021-22966.md): Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below. (no CVSS, https://github.com/concrete5/concrete5 · concrete5/core)
- [CVE-2021-22970](https://cve.now/CVE-2021-22970.md): Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable to (no CVSS, https://github.com/concrete5/concrete5 · concrete5/core)
- [CVE-2021-22969](https://cve.now/CVE-2021-22969.md): Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability t (no CVSS, https://github.com/concrete5/concrete5 · concrete5/core)
- [CVE-2021-42254](https://cve.now/CVE-2021-42254.md): BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions. (no CVSS)
- [CVE-2021-41569](https://cve.now/CVE-2021-41569.md): SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. (no CVSS)
- [CVE-2021-44037](https://cve.now/CVE-2021-44037.md): Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning. (no CVSS)
- [CVE-2021-44036](https://cve.now/CVE-2021-44036.md): Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import. (no CVSS)
- [CVE-2021-29329](https://cve.now/CVE-2021-29329.md): OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sour (no CVSS)
- [CVE-2021-29328](https://cve.now/CVE-2021-29328.md): OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c. (no CVSS)
- [CVE-2021-29327](https://cve.now/CVE-2021-29327.md): OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx\_ArrayBuffer function at /moddable/xs/sources/xsDataVi (no CVSS)
- [CVE-2021-29326](https://cve.now/CVE-2021-29326.md): OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c (no CVSS)
- [CVE-2021-29325](https://cve.now/CVE-2021-29325.md): OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx\_String\_prototype\_repeat function at /moddable/xs/sour (no CVSS)
- [CVE-2021-29323](https://cve.now/CVE-2021-29323.md): OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c. (no CVSS)
- [CVE-2021-29324](https://cve.now/CVE-2021-29324.md): OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c. (no CVSS)
- [CVE-2021-39923](https://cve.now/CVE-2021-39923.md): Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted ca (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2021-22028](https://cve.now/CVE-2021-22028.md): In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to inf (no CVSS, gpfdist)
- [CVE-2021-3962](https://cve.now/CVE-2021-3962.md): A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. (no CVSS, ImageMagick)
- [CVE-2021-22030](https://cve.now/CVE-2021-22030.md): In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) info (no CVSS, GPDB)
- [CVE-2021-36003](https://cve.now/CVE-2021-36003.md): Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2021-22053](https://cve.now/CVE-2021-22053.md): Applications using both \`spring-cloud-netflix-hystrix-dashboard\` and \`spring-boot-starter-thymeleaf\` expose a way to execute code submitted (no CVSS, Spring Cloud Netflix · org.springframework.cloud:spring-clo…)
- [CVE-2021-33850](https://cve.now/CVE-2021-33850.md): There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. (no CVSS, Microsoft Clarity)
- [CVE-2021-43408](https://cve.now/CVE-2021-43408.md): Duplicate Post WordPress Plugin SQL Injection Vulnerability (CVSS 6.5, Copy Delete Posts Duplicate Post WordPress Plugin)
- [CVE-2021-43409](https://cve.now/CVE-2021-43409.md): WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting (CVSS 9.3, wpo365.com WordPress + Microsoft Office 365 / Azure AD | LO…)
- [CVE-2021-42363](https://cve.now/CVE-2021-42363.md): Preview E-Mails for WooCommerce \<= 1.6.8 Reflected Cross-Site Scripting (CVSS 6.1, Preview E-Mails for WooCommerce)
- [CVE-2021-39353](https://cve.now/CVE-2021-39353.md): Easy Registration Forms \<= 2.1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 8.8, Easy Registration Forms)
- [CVE-2021-37592](https://cve.now/CVE-2021-37592.md): Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of s (no CVSS)
- [CVE-2021-3920](https://cve.now/CVE-2021-3920.md): Cross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin (CVSS 4.6, getgrav/grav-plugin-admin)
- [CVE-2021-3950](https://cve.now/CVE-2021-3950.md): Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk (CVSS 8.8, django-helpdesk/django-helpdesk · django-helpdesk)
- [CVE-2021-3957](https://cve.now/CVE-2021-3957.md): Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 (CVSS 4.6, kevinpapst/kimai2)
- [CVE-2021-3961](https://cve.now/CVE-2021-3961.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 8.0, snipe/snipe-it)
- [CVE-2021-3963](https://cve.now/CVE-2021-3963.md): Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 (CVSS 4.3, kevinpapst/kimai2)
- [CVE-2021-3968](https://cve.now/CVE-2021-3968.md): Heap-based Buffer Overflow in vim/vim (CVSS 8.0, vim/vim)
- [CVE-2021-3973](https://cve.now/CVE-2021-3973.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3, vim/vim)
- [CVE-2021-41435](https://cve.now/CVE-2021-41435.md): A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U\_V2, RT-AX58U, R (no CVSS)
- [CVE-2021-41436](https://cve.now/CVE-2021-41436.md): An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U\_V2, RT-AX58U, RT-AX82U, (no CVSS)
- [CVE-2021-3976](https://cve.now/CVE-2021-3976.md): Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 (CVSS 4.3, kevinpapst/kimai2)
- [CVE-2021-41532](https://cve.now/CVE-2021-41532.md): Unauthenticated access to Ozone Recon HTTP endpoints (no CVSS, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2021-39236](https://cve.now/CVE-2021-39236.md): Owners of the S3 tokens are not validated (no CVSS, Apache Software Foundation Apache Ozone · org.apache.hadoop…)
- [CVE-2021-39235](https://cve.now/CVE-2021-39235.md): Access mode of block tokens are not enforced (no CVSS, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2021-39234](https://cve.now/CVE-2021-39234.md): Raw block data can be read bypassing ACL/authorization (no CVSS, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2021-39233](https://cve.now/CVE-2021-39233.md): Container-related datanode operations can be called without authorization (no CVSS, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2021-39232](https://cve.now/CVE-2021-39232.md): Missing admin check for SCM related admin commands (no CVSS, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2021-39231](https://cve.now/CVE-2021-39231.md): Missing authentication/authorization on internal RPC endpoints (no CVSS, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2021-36372](https://cve.now/CVE-2021-36372.md): Original block tokens are persisted and can be retrieved (no CVSS, Apache Software Foundation Apache Ozone · org.apache.ozone:…)
- [CVE-2021-42338](https://cve.now/CVE-2021-42338.md): 4MOSAn GCB Doctor - Improper Authorization (CVSS 9.8, 4MOSAn GCB Doctor)
- [CVE-2021-44033](https://cve.now/CVE-2021-44033.md): In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed. (no CVSS)
- [CVE-2021-44025](https://cve.now/CVE-2021-44025.md): Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type w (no CVSS)
- [CVE-2021-44026](https://cve.now/CVE-2021-44026.md): Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search\_params. (CVSS 9.8, KEV)
- [CVE-2021-21898](https://cve.now/CVE-2021-21898.md): A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. (CVSS 8.8, LibreCAD)
- [CVE-2021-21899](https://cve.now/CVE-2021-21899.md): A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. (CVSS 8.8, LibreCAD)
- [CVE-2021-21900](https://cve.now/CVE-2021-21900.md): A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. (CVSS 8.8, LibreCAD)
- [CVE-2021-3974](https://cve.now/CVE-2021-3974.md): Use After Free in vim/vim (CVSS 7.3, vim/vim)
- [CVE-2021-39921](https://cve.now/CVE-2021-39921.md): NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2021-39922](https://cve.now/CVE-2021-39922.md): Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or cra (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2021-39924](https://cve.now/CVE-2021-39924.md): Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or c (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2021-39925](https://cve.now/CVE-2021-39925.md): Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2021-39926](https://cve.now/CVE-2021-39926.md): Buffer overflow in the Bluetooth HCI\_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capt (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2021-39929](https://cve.now/CVE-2021-39929.md): Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet in (CVSS 7.5, Wireshark Foundation Wireshark)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-11-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.