# CVEs published 2021-12-09

53 CVEs were published on December 9, 2021: 3 critical, 10 high. Days are UTC.

- [CVE-2021-43803](https://cve.now/CVE-2021-43803.md): Unexpected server crash in Next.js (CVSS 7.5, vercel next.js · next)
- [CVE-2021-43802](https://cve.now/CVE-2021-43802.md): Admin privilege escalation and arbitrary code execution via malicious \*.etherpad imports (CVSS 9.9, etherpad-lite)
- [CVE-2021-43982](https://cve.now/CVE-2021-43982.md): Delta Electronics CNCSoft (CVSS 7.8, Delta Electronics CNCSoft)
- [CVE-2021-37861](https://cve.now/CVE-2021-37861.md): Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails. (CVSS 5.8, Mattermost)
- [CVE-2021-4033](https://cve.now/CVE-2021-4033.md): Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 (CVSS 6.5, kevinpapst/kimai2)
- [CVE-2021-44514](https://cve.now/CVE-2021-44514.md): OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories. (no CVSS)
- [CVE-2021-43608](https://cve.now/CVE-2021-43608.md): Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. (no CVSS, doctrine/dbal)
- [CVE-2020-19683](https://cve.now/CVE-2020-19683.md): A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. (no CVSS)
- [CVE-2020-19682](https://cve.now/CVE-2020-19682.md): A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save\_user funciton in save.php. (no CVSS)
- [CVE-2021-22568](https://cve.now/CVE-2021-22568.md): Dart - Publishing to third-party package repositories may expose pub.dev credentials (CVSS 8.8, Google Dart SDK)
- [CVE-2021-39002](https://cve.now/CVE-2021-39002.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic al (CVSS 5.9, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2021-38951](https://cve.now/CVE-2021-38951.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. (CVSS 7.5, IBM WebSphere Application Server)
- [CVE-2021-38931](https://cve.now/CVE-2021-38931.md): IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a (CVSS 6.5, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2021-38926](https://cve.now/CVE-2021-38926.md): IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privilege (CVSS 5.5, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2021-29678](https://cve.now/CVE-2021-29678.md): IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to (CVSS 8.7, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2021-20373](https://cve.now/CVE-2021-20373.md): IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumst (CVSS 5.9, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2021-41265](https://cve.now/CVE-2021-41265.md): Improper Authentication in Flask-AppBuilder (CVSS 8.1, dpgaspar Flask-AppBuilder · flask-appbuilder)
- [CVE-2021-43703](https://cve.now/CVE-2021-43703.md): An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. (no CVSS)
- [CVE-2021-40282](https://cve.now/CVE-2021-40282.md): An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl\_download.php. (no CVSS)
- [CVE-2021-40281](https://cve.now/CVE-2021-40281.md): An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl\_print.php when registering ordinary users. (no CVSS)
- [CVE-2021-40280](https://cve.now/CVE-2021-40280.md): An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl\_sendmail.php. (no CVSS)
- [CVE-2021-4038](https://cve.now/CVE-2021-4038.md): NSM vulnerable to XSS (CVSS 4.8, McAfee Network Security Manager)
- [CVE-2021-41246](https://cve.now/CVE-2021-41246.md): Session fixation in express-openid-connect (CVSS 4.6, auth0 express-openid-connect · express-openid-connect)
- [CVE-2021-40279](https://cve.now/CVE-2021-40279.md): An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php. (no CVSS)
- [CVE-2021-41697](https://cve.now/CVE-2021-41697.md): A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror\_description parameter in assets/so (no CVSS)
- [CVE-2021-41696](https://cve.now/CVE-2021-41696.md): An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in re (no CVSS)
- [CVE-2021-21955](https://cve.now/CVE-2021-21955.md): An authentication bypass vulnerability exists in the get\_aes\_key\_info\_by\_packetid() function of the home\_security binary of Anker Eufy Homeb (CVSS 7.7, Anker)
- [CVE-2021-21954](https://cve.now/CVE-2021-21954.md): A command execution vulnerability exists in the wifi\_country\_code\_update functionality of the home\_security binary of Anker Eufy Homebase 2 (CVSS 9.9, Anker)
- [CVE-2021-41695](https://cve.now/CVE-2021-41695.md): An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. (no CVSS)
- [CVE-2021-20139](https://cve.now/CVE-2021-20139.md): An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller\_server service on Gryphon Tower (no CVSS, Gryphon Tower router)
- [CVE-2021-20138](https://cve.now/CVE-2021-20138.md): An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luc (no CVSS, Gryphon Tower router)
- [CVE-2021-20137](https://cve.now/CVE-2021-20137.md): A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site\_access/ page on the Gryphon Tower route (no CVSS, Gryphon Tower router)
- [CVE-2021-20142](https://cve.now/CVE-2021-20142.md): An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller\_server service on Gryphon Towe (no CVSS, Gryphon Tower router)
- [CVE-2021-20141](https://cve.now/CVE-2021-20141.md): An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller\_server service on Gryphon Towe (no CVSS, Gryphon Tower router)
- [CVE-2021-20140](https://cve.now/CVE-2021-20140.md): An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller\_server service on Gryphon Towe (no CVSS, Gryphon Tower router)
- [CVE-2021-41694](https://cve.now/CVE-2021-41694.md): An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\\user.php. (no CVSS)
- [CVE-2021-20146](https://cve.now/CVE-2021-20146.md): An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon' (no CVSS, Gryphon Tower router)
- [CVE-2021-20145](https://cve.now/CVE-2021-20145.md): Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN networ (no CVSS, Gryphon Tower router)
- [CVE-2021-20144](https://cve.now/CVE-2021-20144.md): An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller\_server service on Gryphon Towe (no CVSS, Gryphon Tower router)
- [CVE-2021-20143](https://cve.now/CVE-2021-20143.md): An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller\_server service on Gryphon Towe (no CVSS, Gryphon Tower router)
- [CVE-2021-41449](https://cve.now/CVE-2021-41449.md): A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated atta (no CVSS)
- [CVE-2021-22565](https://cve.now/CVE-2021-22565.md): Insufficient Granularity of Access Control in GAEN Notification Server (CVSS 6.5, Google Exposure-notifications-verification-server · github.…)
- [CVE-2021-3817](https://cve.now/CVE-2021-3817.md): SQL Injection in wbce/wbce\_cms (CVSS 9.8, wbce/wbce\_cms)
- [CVE-2021-43068](https://cve.now/CVE-2021-43068.md): A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIU (CVSS 5.4, Fortinet FortiAuthenticator)
- [CVE-2021-36167](https://cve.now/CVE-2021-36167.md): An improper authorization vulnerabiltiy \[CWE-285\] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an (CVSS 4.3, Fortinet FortiClientWindows)
- [CVE-2021-42759](https://cve.now/CVE-2021-42759.md): A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unau (CVSS 6.7, Fortinet Meru AP)
- [CVE-2021-43071](https://cve.now/CVE-2021-43071.md): A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker (CVSS 8.8, Fortinet FortiWeb)
- [CVE-2021-43065](https://cve.now/CVE-2021-43065.md): A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below (CVSS 7.8, Fortinet FortiNAC)
- [CVE-2021-36189](https://cve.now/CVE-2021-36189.md): A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to inform (CVSS 6.8, Fortinet FortiClientEMS)
- [CVE-2021-43204](https://cve.now/CVE-2021-43204.md): A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, versi (CVSS 4.4, Fortinet FortiClientWindows)
- [CVE-2021-43410](https://cve.now/CVE-2021-43410.md): airavata-django-portal allows CRLF log injection because of the lack of escaping in the log statements (no CVSS, Apache Software Foundation Apache Airavata Django Portal)
- [CVE-2021-36194](https://cve.now/CVE-2021-36194.md): Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated a (CVSS 8.8, Fortinet FortiWeb)
- [CVE-2021-43797](https://cve.now/CVE-2021-43797.md): HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling (CVSS 6.5, netty · io.netty:netty-codec-http +2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.