# CVEs published 2021-12-08

137 CVEs were published on December 8, 2021: 6 critical, 25 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2021-43811](https://cve.now/CVE-2021-43811.md): Code injection via unsafe YAML loading (CVSS 7.8, awslabs sockeye · sockeye)
- [CVE-2021-21957](https://cve.now/CVE-2021-21957.md): A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. (CVSS 8.8, Dream Report)
- [CVE-2021-21950](https://cve.now/CVE-2021-21950.md): An out-of-bounds write vulnerability exists in the CMD\_DEVICE\_GET\_SERVER\_LIST\_REQUEST functionality of the home\_security binary of Anker Euf (CVSS 10.0, Anker)
- [CVE-2021-21951](https://cve.now/CVE-2021-21951.md): An out-of-bounds write vulnerability exists in the CMD\_DEVICE\_GET\_SERVER\_LIST\_REQUEST functionality of the home\_security binary of Anker Euf (CVSS 10.0, Anker)
- [CVE-2021-4048](https://cve.now/CVE-2021-4048.md): An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in O (no CVSS, lapack)
- [CVE-2021-38503](https://cve.now/CVE-2021-38503.md): The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-38504](https://cve.now/CVE-2021-38504.md): When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-38505](https://cve.now/CVE-2021-38505.md): Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-38506](https://cve.now/CVE-2021-38506.md): Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-38507](https://cve.now/CVE-2021-38507.md): The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-38508](https://cve.now/CVE-2021-38508.md): By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validit (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-38509](https://cve.now/CVE-2021-38509.md): Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be d (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-38510](https://cve.now/CVE-2021-38510.md): The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-43528](https://cve.now/CVE-2021-43528.md): Thunderbird unexpectedly enabled JavaScript in the composition area. (no CVSS, Mozilla Thunderbird)
- [CVE-2021-43530](https://cve.now/CVE-2021-43530.md): A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a Q (no CVSS, Mozilla Firefox)
- [CVE-2021-43531](https://cve.now/CVE-2021-43531.md): When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. (no CVSS, Mozilla Firefox)
- [CVE-2021-43532](https://cve.now/CVE-2021-43532.md): The 'Copy Image Link' context menu action would copy the final image URL after redirects. (no CVSS, Mozilla Firefox)
- [CVE-2021-43533](https://cve.now/CVE-2021-43533.md): When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies t (no CVSS, Mozilla Firefox)
- [CVE-2021-43534](https://cve.now/CVE-2021-43534.md): Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-43535](https://cve.now/CVE-2021-43535.md): A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a pote (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2021-43536](https://cve.now/CVE-2021-43536.md): Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43537](https://cve.now/CVE-2021-43537.md): An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitabl (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43538](https://cve.now/CVE-2021-43538.md): By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full scre (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43539](https://cve.now/CVE-2021-43539.md): Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43540](https://cve.now/CVE-2021-43540.md): WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been (no CVSS, Mozilla Firefox)
- [CVE-2021-43541](https://cve.now/CVE-2021-43541.md): When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43542](https://cve.now/CVE-2021-43542.md): Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43543](https://cve.now/CVE-2021-43543.md): Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43544](https://cve.now/CVE-2021-43544.md): When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have ca (no CVSS, Mozilla Firefox)
- [CVE-2021-43545](https://cve.now/CVE-2021-43545.md): Using the Location API in a loop could have caused severe application hangs and crashes. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-43546](https://cve.now/CVE-2021-43546.md): It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1)
- [CVE-2021-23862](https://cve.now/CVE-2021-23862.md): Authenticated Remote Code Execution (CVSS 7.2, Bosch BVMS · Bosch DIVAR IP 7000 R2 +4)
- [CVE-2021-23861](https://cve.now/CVE-2021-23861.md): Possible Access to Debug Functions in Bosch VRM / BVMS (CVSS 6.5, Bosch BVMS · Bosch DIVAR IP 7000 R2 +2)
- [CVE-2021-23860](https://cve.now/CVE-2021-23860.md): Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMS (CVSS 5.0, Bosch BVMS · Bosch DIVAR IP 7000 R2 +2)
- [CVE-2021-23859](https://cve.now/CVE-2021-23859.md): Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products (CVSS 9.1, Bosch BVMS · Bosch DIVAR IP 7000 R2 +5)
- [CVE-2021-37941](https://cve.now/CVE-2021-37941.md): A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an applica (no CVSS, Elastic APM Java Agent · elastic-apm)
- [CVE-2021-36718](https://cve.now/CVE-2021-36718.md): SYNEL - eharmonynew / Synel Reports version 8.0.2 Default credentials , Security miscommunication , Sensetive data exposure (CVSS 6.1, Synel eharmonynew, Synel Reports)
- [CVE-2021-36719](https://cve.now/CVE-2021-36719.md): Cybonet - PineApp (no CVSS, Cybonet PineApp - Mail Secure)
- [CVE-2021-36720](https://cve.now/CVE-2021-36720.md): Cybonet - PineApp (no CVSS, Cybonet PineApp - Mail Secure)
- [CVE-2021-41017](https://cve.now/CVE-2021-41017.md): Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow (CVSS 8.8, Fortinet FortiWeb)
- [CVE-2021-43809](https://cve.now/CVE-2021-43809.md): Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile (CVSS 6.7, rubygems · bundler)
- [CVE-2021-41025](https://cve.now/CVE-2021-41025.md): Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2 (CVSS 7.3, Fortinet FortiWeb)
- [CVE-2021-36173](https://cve.now/CVE-2021-36173.md): A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 th (CVSS 8.0, Fortinet FortiOS)
- [CVE-2020-27416](https://cve.now/CVE-2020-27416.md): Mahavitaran android application 7.50 and prior are affected by account takeover due to improper OTP validation, allows remote attackers to c (no CVSS)
- [CVE-2021-43399](https://cve.now/CVE-2021-43399.md): The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations (no CVSS)
- [CVE-2021-43978](https://cve.now/CVE-2021-43978.md): Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modif (CVSS 7.1)
- [CVE-2021-36195](https://cve.now/CVE-2021-36195.md): Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 th (CVSS 4.2, Fortinet FortiWeb)
- [CVE-2021-41030](https://cve.now/CVE-2021-41030.md): An authentication bypass by capture-replay vulnerability \[CWE-294\] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow (CVSS 5.4, Fortinet FortiClientEMS)
- [CVE-2021-41021](https://cve.now/CVE-2021-41021.md): A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privil (CVSS 7.8, Fortinet FortiNAC)
- [CVE-2021-41063](https://cve.now/CVE-2021-41063.md): SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attacke (no CVSS)
- [CVE-2021-27860](https://cve.now/CVE-2021-27860.md): Arbitrary file upload vulnerability in FatPipe software (CVSS 9.8, KEV, FatPipe WARP · FatPipe IPVPN +1)
- [CVE-2021-41090](https://cve.now/CVE-2021-41090.md): Instance config inline secret exposure (CVSS 6.5, grafana agent · github.com/grafana/agent)
- [CVE-2021-3815](https://cve.now/CVE-2021-3815.md): Prototype Pollution in fabiocaccamo/utils.js (CVSS 8.0, fabiocaccamo/utils.js · @fabiocaccamo/utils.js)
- [CVE-2021-42110](https://cve.now/CVE-2021-42110.md): An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. (CVSS 7.1)
- [CVE-2021-41450](https://cve.now/CVE-2021-41450.md): An HTTP request smuggling attack in TP-Link AX10v1 before v1\_211117 allows a remote unauthenticated attacker to DoS the web application via (no CVSS)
- [CVE-2021-40861](https://cve.now/CVE-2021-40861.md): A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allows an attacker to exe (no CVSS)
- [CVE-2021-40860](https://cve.now/CVE-2021-40860.md): A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.11 allows an attacker (no CVSS)
- [CVE-2021-42835](https://cve.now/CVE-2021-42835.md): An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. (no CVSS)
- [CVE-2021-25527](https://cve.now/CVE-2021-25527.md): Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to acces (CVSS 3.8, Samsung Mobile Samsung Pay)
- [CVE-2021-25526](https://cve.now/CVE-2021-25526.md): Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action. (CVSS 4.0, Samsung Mobile Samsung Blockchain Wallet)
- [CVE-2021-25525](https://cve.now/CVE-2021-25525.md): Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC (CVSS 2.0, Samsung Mobile Samsung Pay)
- [CVE-2021-25524](https://cve.now/CVE-2021-25524.md): Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID. (CVSS 4.0, Samsung Mobile Contacts)
- [CVE-2021-25523](https://cve.now/CVE-2021-25523.md): Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID. (CVSS 4.0, Samsung Mobile SamsungDialer)
- [CVE-2021-25522](https://cve.now/CVE-2021-25522.md): Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captu (CVSS 5.3, Samsung Mobile Samsung Capture)
- [CVE-2021-25521](https://cve.now/CVE-2021-25521.md): Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in S (CVSS 4.0, Samsung Mobile Samsung Internet)
- [CVE-2021-25520](https://cve.now/CVE-2021-25520.md): Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstruste (CVSS 5.9, Samsung Mobile Samsung Internet)
- [CVE-2021-25519](https://cve.now/CVE-2021-25519.md): An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without p (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2021-25518](https://cve.now/CVE-2021-25518.md): An improper boundary check in secure\_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution. (CVSS 6.4, Samsung Mobile Devices)
- [CVE-2021-25517](https://cve.now/CVE-2021-25517.md): An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution. (CVSS 7.7, Samsung Mobile Devices)
- [CVE-2021-25516](https://cve.now/CVE-2021-25516.md): An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locatio (CVSS 6.4, Samsung Mobile Devices)
- [CVE-2021-25515](https://cve.now/CVE-2021-25515.md): An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID. (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2021-25514](https://cve.now/CVE-2021-25514.md): An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information. (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2021-25513](https://cve.now/CVE-2021-25513.md): An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some d (CVSS 2.4, Samsung Mobile Devices)
- [CVE-2021-25512](https://cve.now/CVE-2021-25512.md): An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities. (CVSS 6.1, Samsung Mobile Devices)
- [CVE-2021-25511](https://cve.now/CVE-2021-25511.md): An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path (CVSS 6.3, Samsung Mobile Devices)
- [CVE-2021-25510](https://cve.now/CVE-2021-25510.md): An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution. (CVSS 5.3, Samsung Mobile Devices)
- [CVE-2021-37097](https://cve.now/CVE-2021-37097.md): There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37093](https://cve.now/CVE-2021-37093.md): There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers st (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37092](https://cve.now/CVE-2021-37092.md): There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affe (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37075](https://cve.now/CVE-2021-37075.md): There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confid (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37074](https://cve.now/CVE-2021-37074.md): There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privile (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37069](https://cve.now/CVE-2021-37069.md): There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37054](https://cve.now/CVE-2021-37054.md): There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37053](https://cve.now/CVE-2021-37053.md): There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37052](https://cve.now/CVE-2021-37052.md): There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information lea (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37051](https://cve.now/CVE-2021-37051.md): There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memo (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37050](https://cve.now/CVE-2021-37050.md): There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect ser (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37049](https://cve.now/CVE-2021-37049.md): There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memor (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37045](https://cve.now/CVE-2021-37045.md): There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedl (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37044](https://cve.now/CVE-2021-37044.md): There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabili (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37040](https://cve.now/CVE-2021-37040.md): There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalati (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37039](https://cve.now/CVE-2021-37039.md): There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37037](https://cve.now/CVE-2021-37037.md): There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-41013](https://cve.now/CVE-2021-41013.md): An improper access control vulnerability \[CWE-284\] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of (CVSS 5.3, Fortinet FortiWeb)
- [CVE-2021-36188](https://cve.now/CVE-2021-36188.md): A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 (CVSS 6.1, Fortinet FortiWeb)
- [CVE-2021-43063](https://cve.now/CVE-2021-43063.md): A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version (CVSS 6.1, Fortinet FortiWeb)
- [CVE-2021-36190](https://cve.now/CVE-2021-36190.md): A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthentica (CVSS 5.5, Fortinet FortiWeb)
- [CVE-2021-41014](https://cve.now/CVE-2021-41014.md): A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to mak (CVSS 7.5, Fortinet FortiWeb)
- [CVE-2021-36191](https://cve.now/CVE-2021-36191.md): A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use (CVSS 4.1, Fortinet FortiWeb)
- [CVE-2021-41027](https://cve.now/CVE-2021-41027.md): A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or (CVSS 7.3, Fortinet FortiWeb)
- [CVE-2021-41015](https://cve.now/CVE-2021-41015.md): A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 (CVSS 6.1, Fortinet FortiWeb)
- [CVE-2021-43064](https://cve.now/CVE-2021-43064.md): A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 (CVSS 4.3, Fortinet FortiWeb)
- [CVE-2021-26109](https://cve.now/CVE-2021-26109.md): An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated attac (CVSS 8.1, Fortinet FortiOS)
- [CVE-2021-26108](https://cve.now/CVE-2021-26108.md): A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by rever (CVSS 7.5, Fortinet FortiOS)
- [CVE-2021-41024](https://cve.now/CVE-2021-41024.md): A relative path traversal \[CWE-23\] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticat (CVSS 7.5, Fortinet FortiOS)
- [CVE-2021-26103](https://cve.now/CVE-2021-26103.md): An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.1 (CVSS 6.3, Fortinet FortiOS)
- [CVE-2021-32591](https://cve.now/CVE-2021-32591.md): A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, F (CVSS 5.3, Fortinet FortiSandbox)
- [CVE-2021-42752](https://cve.now/CVE-2021-42752.md): A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows a (CVSS 5.4, Fortinet FortiWLM)
- [CVE-2021-42760](https://cve.now/CVE-2021-42760.md): A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows a (CVSS 8.8, Fortinet FortiWLM)
- [CVE-2021-41029](https://cve.now/CVE-2021-41029.md): A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows a (CVSS 6.4, Fortinet FortiWLM)
- [CVE-2021-43067](https://cve.now/CVE-2021-43067.md): A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version (CVSS 8.3, Fortinet FortiAuthenticator)
- [CVE-2021-44557](https://cve.now/CVE-2021-44557.md): National Library of the Netherlands multiNER \<= c0440948057afc6e3d6b4903a7c05e666b94a3bc is affected by an XML External Entity (XXE) vulnera (no CVSS)
- [CVE-2021-44556](https://cve.now/CVE-2021-44556.md): National Library of the Netherlands digger \< 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerabili (no CVSS)
- [CVE-2021-42757](https://cve.now/CVE-2021-42757.md): A buffer overflow \[CWE-121\] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated l (CVSS 6.3, Fortinet FortiOS · Fortinet FortiDDoS-F +12)
- [CVE-2021-31850](https://cve.now/CVE-2021-31850.md): Denial of Service in Database Security on Windows (CVSS 6.1, McAfee Database Security)
- [CVE-2021-42758](https://cve.now/CVE-2021-42758.md): An improper access control vulnerability \[CWE-284\] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privi (CVSS 8.8, Fortinet FortiWLC)
- [CVE-2021-36180](https://cve.now/CVE-2021-36180.md): Multiple improper neutralization of special elements used in a command vulnerabilities \[CWE-77\] in FortiWeb management interface 6.4.1 and b (CVSS 8.1, Fortinet FortiWeb)
- [CVE-2021-4050](https://cve.now/CVE-2021-4050.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.1, livehelperchat/livehelperchat · remdex/livehelperchat)
- [CVE-2021-26110](https://cve.now/CVE-2021-26110.md): An improper access control vulnerability \[CWE-284\] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and For (CVSS 7.8, Fortinet FortiOS, FortiProxy)
- [CVE-2021-20047](https://cve.now/CVE-2021-20047.md): SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. (no CVSS, SonicWall Global VPN Client)
- [CVE-2021-20045](https://cve.now/CVE-2021-20045.md): A buffer overflow vulnerability in SMA100 sonicfiles RAC\_COPY\_TO (RacNumber 36) method allows a remote unauthenticated attacker to potential (no CVSS, SonicWall SMA100)
- [CVE-2021-20044](https://cve.now/CVE-2021-20044.md): A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system (no CVSS, SonicWall SMA100)
- [CVE-2021-20043](https://cve.now/CVE-2021-20043.md): A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially exe (no CVSS, SonicWall SMA100)
- [CVE-2021-20042](https://cve.now/CVE-2021-20042.md): An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. (no CVSS, SonicWall SMA100)
- [CVE-2021-20041](https://cve.now/CVE-2021-20041.md): An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfile (no CVSS, SonicWall SMA100)
- [CVE-2021-20040](https://cve.now/CVE-2021-20040.md): A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or (no CVSS, SonicWall SMA100)
- [CVE-2021-20039](https://cve.now/CVE-2021-20039.md): Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenti (CVSS 8.8, SonicWall SMA100)
- [CVE-2021-20038](https://cve.now/CVE-2021-20038.md): A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod\_cgi module environment variables allows a remote unauthentic (CVSS 9.8, KEV, SonicWall SMA100)
- [CVE-2018-25020](https://cve.now/CVE-2018-25020.md): The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructio (no CVSS)
- [CVE-2020-22421](https://cve.now/CVE-2020-22421.md): 74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help\_list&key. (no CVSS)
- [CVE-2021-3370](https://cve.now/CVE-2021-3370.md): DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php. (no CVSS)
- [CVE-2021-41311](https://cve.now/CVE-2021-41311.md): Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access r (CVSS 7.5, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-41309](https://cve.now/CVE-2021-41309.md): Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export a (CVSS 5.3, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-43527](https://cve.now/CVE-2021-43527.md): NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA- (no CVSS, Mozilla NSS)
- [CVE-2021-44529](https://cve.now/CVE-2021-44529.md): A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code wit (CVSS 9.8, KEV, Ivanti EPM)
- [CVE-2021-44725](https://cve.now/CVE-2021-44725.md): KNIME Server before 4.13.4 allows directory traversal in a request for a client profile. (CVSS 7.5)
- [CVE-2021-44726](https://cve.now/CVE-2021-44726.md): KNIME Server before 4.13.4 allows XSS via the old WebPortal login page. (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.