# CVEs published 2021-12-13

108 CVEs were published on December 13, 2021: 2 critical, 9 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-41272](https://cve.now/CVE-2021-41272.md): SHL, SHR, and SAR operations trigger native exception at key values in besu (CVSS 7.5, hyperledger besu)
- [CVE-2020-19042](https://cve.now/CVE-2020-19042.md): Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php. (no CVSS)
- [CVE-2021-24045](https://cve.now/CVE-2021-24045.md): A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. (no CVSS, Facebook Hermes)
- [CVE-2021-43823](https://cve.now/CVE-2021-43823.md): Side-channel attack in Sourcegraph (CVSS 6.5, sourcegraph)
- [CVE-2021-43822](https://cve.now/CVE-2021-43822.md): SQL injection in jackalope/jackalope-doctrine-dbal (CVSS 8.5, jackalope-doctrine-dbal · jackalope/jackalope-doctrine-dbal)
- [CVE-2021-43817](https://cve.now/CVE-2021-43817.md): Reflected Cross-Site-Scripting vulnerability in Collabora Online (CVSS 8.2, CollaboraOnline online)
- [CVE-2021-43814](https://cve.now/CVE-2021-43814.md): Heap-based OOB write when parsing dwarf DIE info in Rizin (CVSS 7.7, rizinorg rizin)
- [CVE-2021-43801](https://cve.now/CVE-2021-43801.md): Uncaught Exception in mercurius (CVSS 7.5, mercurius-js mercurius · mercurius)
- [CVE-2021-39063](https://cve.now/CVE-2021-39063.md): IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out pri (CVSS 6.5, IBM Spectrum Protect Plus)
- [CVE-2021-39057](https://cve.now/CVE-2021-39057.md): IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). (CVSS 4.2, IBM Spectrum Protect Plus)
- [CVE-2021-39050](https://cve.now/CVE-2021-39050.md): IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. (CVSS 5.3, IBM i2 Analyst's Notebook)
- [CVE-2021-39049](https://cve.now/CVE-2021-39049.md): IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. (CVSS 5.3, IBM i2 Analyst's Notebook)
- [CVE-2021-39048](https://cve.now/CVE-2021-39048.md): IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. (CVSS 6.2, IBM Spectrum Protect)
- [CVE-2021-38901](https://cve.now/CVE-2021-38901.md): IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sensitive information. (CVSS 5.1, IBM Spectrum Protect Operations Center)
- [CVE-2020-4496](https://cve.now/CVE-2020-4496.md): The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man (CVSS 6.8, IBM Spectrum Protect Plus)
- [CVE-2021-32024](https://cve.now/CVE-2021-32024.md): A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentia (CVSS 9.8, BlackBerry QNX Software Development Platform)
- [CVE-2021-43818](https://cve.now/CVE-2021-43818.md): HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVSS 8.2, lxml)
- [CVE-2021-39065](https://cve.now/CVE-2021-39065.md): IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by im (CVSS 8.1, IBM Spectrum Copy Data Management)
- [CVE-2021-39064](https://cve.now/CVE-2021-39064.md): IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials (CVSS 5.9, IBM Spectrum Copy Data Management)
- [CVE-2021-39058](https://cve.now/CVE-2021-39058.md): IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decr (CVSS 5.9, IBM Spectrum Copy Data Management)
- [CVE-2021-39054](https://cve.now/CVE-2021-39054.md): IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. (CVSS 5.4, IBM Spectrum Copy Data Management)
- [CVE-2021-39053](https://cve.now/CVE-2021-39053.md): IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper h (CVSS 5.9, IBM Spectrum Copy Data Management)
- [CVE-2021-39052](https://cve.now/CVE-2021-39052.md): IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. (CVSS 5.6, IBM Spectrum Copy Data Management)
- [CVE-2021-38947](https://cve.now/CVE-2021-38947.md): IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decr (CVSS 5.9, IBM Spectrum Copy Data Management)
- [CVE-2020-16156](https://cve.now/CVE-2020-16156.md): CPAN 2.28 allows Signature Verification Bypass. (no CVSS)
- [CVE-2020-16155](https://cve.now/CVE-2020-16155.md): The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data. (no CVSS)
- [CVE-2020-16154](https://cve.now/CVE-2020-16154.md): The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. (no CVSS)
- [CVE-2021-43983](https://cve.now/CVE-2021-43983.md): WECON LeviStudioU (CVSS 7.8, WECON LeviStudioU)
- [CVE-2021-40008](https://cve.now/CVE-2021-40008.md): There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C0 (no CVSS, CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEn…)
- [CVE-2021-40007](https://cve.now/CVE-2021-40007.md): There is an information leak vulnerability in eCNS280\_TD V100R005C10SPC650. (no CVSS, eCNS280\_TD)
- [CVE-2021-22279](https://cve.now/CVE-2021-22279.md): OmniCore RobotWare Missing Authentication Vulnerability (CVSS 9.8, ABB RobotWare)
- [CVE-2021-39930](https://cve.now/CVE-2021-39930.md): Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an att (CVSS 4.3, GitLab)
- [CVE-2021-39939](https://cve.now/CVE-2021-39939.md): An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions st (CVSS 6.5, GitLab Runner)
- [CVE-2021-39941](https://cve.now/CVE-2021-39941.md): An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed non-project memb (CVSS 3.7, GitLab)
- [CVE-2021-39935](https://cve.now/CVE-2021-39935.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before (CVSS 6.8, KEV, GitLab)
- [CVE-2021-39917](https://cve.now/CVE-2021-39917.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before (CVSS 4.3, GitLab)
- [CVE-2021-39932](https://cve.now/CVE-2021-39932.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before (CVSS 4.3, GitLab)
- [CVE-2021-39934](https://cve.now/CVE-2021-39934.md): Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions starting 12.10 before (CVSS 4.3, GitLab)
- [CVE-2021-39916](https://cve.now/CVE-2021-39916.md): Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the configuration of any Ext (CVSS 4.3, GitLab)
- [CVE-2021-39919](https://cve.now/CVE-2021-39919.md): In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting fr (CVSS 4.4, GitLab)
- [CVE-2021-39915](https://cve.now/CVE-2021-39915.md): Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting fr (CVSS 5.3, GitLab)
- [CVE-2021-39933](https://cve.now/CVE-2021-39933.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions starting from 14.4 befor (CVSS 4.3, GitLab)
- [CVE-2021-39938](https://cve.now/CVE-2021-39938.md): A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.4 before 14.4.4, all (CVSS 3.1, GitLab)
- [CVE-2021-39937](https://cve.now/CVE-2021-39937.md): A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 before 14.4.4, all ve (CVSS 5.9, GitLab)
- [CVE-2021-39931](https://cve.now/CVE-2021-39931.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before (CVSS 3.1, GitLab)
- [CVE-2021-39936](https://cve.now/CVE-2021-39936.md): Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting from 14.4 before 14.4 (CVSS 3.5, GitLab)
- [CVE-2021-39945](https://cve.now/CVE-2021-39945.md): Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 befo (CVSS 2.7, GitLab)
- [CVE-2021-39944](https://cve.now/CVE-2021-39944.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before (CVSS 7.1, GitLab)
- [CVE-2021-39940](https://cve.now/CVE-2021-39940.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before (CVSS 4.3, GitLab)
- [CVE-2021-39910](https://cve.now/CVE-2021-39910.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions starting from 14.4 before (CVSS 2.6, GitLab)
- [CVE-2021-39918](https://cve.now/CVE-2021-39918.md): Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, (CVSS 3.1, GitLab)
- [CVE-2021-44965](https://cve.now/CVE-2021-44965.md): Directory traversal vulnerability in /admin/includes/\* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retri (no CVSS)
- [CVE-2021-44966](https://cve.now/CVE-2021-44966.md): SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. (no CVSS)
- [CVE-2021-36169](https://cve.now/CVE-2021-36169.md): A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or comm (CVSS 4.2, Fortinet FortiOS)
- [CVE-2021-43117](https://cve.now/CVE-2021-43117.md): fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access. (no CVSS)
- [CVE-2021-42548](https://cve.now/CVE-2021-42548.md): reflected XSS in search functionality of WP Cloud Plugins - Share-one-Drive (CVSS 4.7, WP Cloud Plugins Share-one-Drive)
- [CVE-2021-42549](https://cve.now/CVE-2021-42549.md): reflected XSS in search functionality of WP Cloud Plugins - Lets-Box (CVSS 4.7, WP Cloud Plugins Lets-Box)
- [CVE-2021-42547](https://cve.now/CVE-2021-42547.md): reflected XSS in search functionality of WP Cloud Plugins - Out-of-the-Box (CVSS 4.7, WP Cloud Plugins Out-of-the-Box)
- [CVE-2021-42546](https://cve.now/CVE-2021-42546.md): Reflected XSS in search functionality of WP Cloud Plugins - Use-Your-Drive (CVSS 4.7, WP Cloud Plugins Use-Your-Drive)
- [CVE-2021-24972](https://cve.now/CVE-2021-24972.md): Pixel Cat Lite \< 2.6.3 - Admin+ Stored Cross-Site Scripting (no CVSS, Pixel Cat – Conversion Pixel Manager)
- [CVE-2021-24970](https://cve.now/CVE-2021-24970.md): All-In-One-Gallery \< 2.5.0 - Admin+ Local File Inclusion (no CVSS, All-in-One Video Gallery)
- [CVE-2021-24955](https://cve.now/CVE-2021-24955.md): ProfilePress \< 3.2.3 - Reflected Cross-Site Scripting (no CVSS, User Registration, Login Form, User Profile & Membership –…)
- [CVE-2021-24954](https://cve.now/CVE-2021-24954.md): ProfilePress \< 3.2.3 - Reflected Cross-Site Scripting (no CVSS, User Registration, Login Form, User Profile & Membership –…)
- [CVE-2021-24951](https://cve.now/CVE-2021-24951.md): LearnPress \< 4.1.4 - Admin+ SQL Injection (no CVSS, LearnPress – WordPress LMS Plugin)
- [CVE-2021-24946](https://cve.now/CVE-2021-24946.md): Modern Events Calendar \< 6.1.5 - Unauthenticated Blind SQL Injection (no CVSS, Modern Events Calendar Lite)
- [CVE-2021-24945](https://cve.now/CVE-2021-24945.md): Like Button Rating \< 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure (no CVSS, Like Button Rating ♥ LikeBtn)
- [CVE-2021-24932](https://cve.now/CVE-2021-24932.md): Auto Featured Image \< 3.9.3 - Reflected Cross-Site Scripting (no CVSS, Auto Featured Image)
- [CVE-2021-24925](https://cve.now/CVE-2021-24925.md): Modern Events Calendar Lite \< 6.1.5 - Reflected Cross-Site Scripting (no CVSS, Modern Events Calendar Lite)
- [CVE-2021-24922](https://cve.now/CVE-2021-24922.md): Pixel Cat Lite \< 2.6.2 - CSRF to Stored Cross-Site Scripting (no CVSS, Pixel Cat – Conversion Pixel Manager)
- [CVE-2021-24896](https://cve.now/CVE-2021-24896.md): Caldera forms \< 1.9.5 - Admin+ Stored Cross-Site Scripting (no CVSS, Caldera Forms – More Than Contact Forms)
- [CVE-2021-24872](https://cve.now/CVE-2021-24872.md): Get Custom Field Values \< 4.0 - Contributors+ Arbitrary Post Metadata Access (no CVSS, Get Custom Field Values)
- [CVE-2021-24871](https://cve.now/CVE-2021-24871.md): Get Custom Field Values \< 4.0.1 - Contributor+ Stored Cross-Site Scripting (no CVSS, Get Custom Field Values)
- [CVE-2021-24863](https://cve.now/CVE-2021-24863.md): StopBadBots \< 6.67 - Unauthenticated SQL Injection (no CVSS, WP Block and Stop Bad Bots Crawlers and Spiders and Anti Sp…)
- [CVE-2021-24861](https://cve.now/CVE-2021-24861.md): Quotes Collection \<= 2.5.2 - Admin+ SQL Injection (no CVSS, Quotes Collection)
- [CVE-2021-24859](https://cve.now/CVE-2021-24859.md): User Meta Shortcodes \<= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata Access (no CVSS, User meta shortcodes)
- [CVE-2021-24857](https://cve.now/CVE-2021-24857.md): ToTop Link \<= 1.7.1 - Unauthenticated PHP Object Injection (no CVSS, ToTop Link)
- [CVE-2021-24855](https://cve.now/CVE-2021-24855.md): Display Post Metadata \< 1.5.0 - Contributor+ Stored Cross-Site Scripting (no CVSS, Display Post Metadata)
- [CVE-2021-24848](https://cve.now/CVE-2021-24848.md): Mediamatic \< 2.8.1 - Subscriber+ SQL Injection (no CVSS, Mediamatic – Media Library Folders)
- [CVE-2021-24845](https://cve.now/CVE-2021-24845.md): Improved Include Page \<= 1.2 - Contributor+ Arbitrary Posts/Pages Access (no CVSS, Improved Include Page)
- [CVE-2021-24836](https://cve.now/CVE-2021-24836.md): Temporary Login Without Password \< 1.7.1 - Subscriber+ Plugin's Settings Update (no CVSS, Temporary Login Without Password)
- [CVE-2021-24819](https://cve.now/CVE-2021-24819.md): Page/Post Content Shortcode \<= 1.0 - Contributor+ Arbitrary Posts/Pages Access (no CVSS, Page/Post Content Shortcode)
- [CVE-2021-24818](https://cve.now/CVE-2021-24818.md): WP Limits \<= 1.0 - Plugin's Settings Update via CSRF (no CVSS, Wp Limits)
- [CVE-2021-24817](https://cve.now/CVE-2021-24817.md): Ultimate NoFollow \<= 1.4.8 - Contributor+ Stored Cross-Site Scripting (no CVSS, Ultimate Nofollow)
- [CVE-2021-24795](https://cve.now/CVE-2021-24795.md): Filter Portfolio Gallery \<= 1.5 - Arbitrary Gallery Deletion via CSRF (no CVSS, Filter Portfolio Gallery)
- [CVE-2021-24792](https://cve.now/CVE-2021-24792.md): Shiny Buttons \<= 1.1.0 - Unauthenticated Stored Cross-Site Scripting (no CVSS, Shiny Buttons – CSS3 Button Generator for WordPress)
- [CVE-2021-24790](https://cve.now/CVE-2021-24790.md): Contact Form Advanced Database \<= 1.0.8 - Unauthorised AJAX Calls (no CVSS, Contact Form Advanced Database)
- [CVE-2021-24784](https://cve.now/CVE-2021-24784.md): WP Admin Logo Changer \<= 1.0 - Plugin's Settings Update via CSRF (no CVSS, WP Admin Logo Changer)
- [CVE-2021-24782](https://cve.now/CVE-2021-24782.md): Flex Local Fonts \<= 1.0.0 - Admin+ Stored Cross-Site-Scripting (no CVSS, Flex Local Fonts)
- [CVE-2021-24780](https://cve.now/CVE-2021-24780.md): Single Post Exporter \<= 1.1.1 - Plugin's Settings Update via CSRF (no CVSS, Single Post Exporter)
- [CVE-2021-24771](https://cve.now/CVE-2021-24771.md): Inspirational Quote Rotator \<= 1.0.0 - Admin+ Stored Cross-Site Scripting (no CVSS, Inspirational Quote Rotator)
- [CVE-2021-24756](https://cve.now/CVE-2021-24756.md): WP System Log \< 1.0.21 - Unauthenticated Stored Cross-Site Scripting (no CVSS, WP System Log)
- [CVE-2021-24747](https://cve.now/CVE-2021-24747.md): SEO Booster \< 3.8 - Admin+ SQL Injection (no CVSS, SEO Booster)
- [CVE-2021-24705](https://cve.now/CVE-2021-24705.md): NEX-Forms \< 8.4.3 - Stored Cross-Site Scripting via CSRF (no CVSS, NEX-Forms)
- [CVE-2021-20867](https://cve.now/CVE-2021-20867.md): Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerab (no CVSS, Delicious Brains Advanced Custom Fields and Advanced Custom…)
- [CVE-2021-20866](https://cve.now/CVE-2021-20866.md): Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerab (no CVSS, Delicious Brains Advanced Custom Fields and Advanced Custom…)
- [CVE-2021-20865](https://cve.now/CVE-2021-20865.md): Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerab (no CVSS, Delicious Brains Advanced Custom Fields and Advanced Custom…)
- [CVE-2021-44154](https://cve.now/CVE-2021-44154.md): An issue was discovered in Reprise RLM 14.2. (no CVSS)
- [CVE-2021-44153](https://cve.now/CVE-2021-44153.md): An issue was discovered in Reprise RLM 14.2. (no CVSS)
- [CVE-2021-40858](https://cve.now/CVE-2021-40858.md): Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. (no CVSS)
- [CVE-2021-40857](https://cve.now/CVE-2021-40857.md): Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring. (no CVSS)
- [CVE-2021-40856](https://cve.now/CVE-2021-40856.md): Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring. (no CVSS)
- [CVE-2021-44848](https://cve.now/CVE-2021-44848.md): In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whet (no CVSS)
- [CVE-2018-25021](https://cve.now/CVE-2018-25021.md): The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker t (no CVSS)
- [CVE-2021-44847](https://cve.now/CVE-2021-44847.md): A stack-based buffer overflow in handle\_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an imp (no CVSS)
- [CVE-2018-25022](https://cve.now/CVE-2018-25022.md): The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a ta (no CVSS)
- [CVE-2021-44151](https://cve.now/CVE-2021-44151.md): An issue was discovered in Reprise RLM 14.2. (no CVSS)
- [CVE-2021-44152](https://cve.now/CVE-2021-44152.md): An issue was discovered in Reprise RLM 14.2. (no CVSS)
- [CVE-2021-44155](https://cve.now/CVE-2021-44155.md): An issue was discovered in /goform/login\_process in Reprise RLM 14.2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.