# CVEs published 2021-12-14

114 CVEs were published on December 14, 2021: 4 critical, 14 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-43827](https://cve.now/CVE-2021-43827.md): Inline footnotes wrapped in \<a\> tags can cause errors in discourse-footnotes (CVSS 4.3, discourse-footnote)
- [CVE-2021-4108](https://cve.now/CVE-2021-4108.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 6.4, snipe/snipe-it)
- [CVE-2021-44942](https://cve.now/CVE-2021-44942.md): glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public\_html/admin/plugins/bad\_behavior2/blacklist.ph (no CVSS)
- [CVE-2021-39183](https://cve.now/CVE-2021-39183.md): Unsafe inline XSS Owncast (CVSS 8.2, owncast · github.com/owncast/owncast)
- [CVE-2021-34426](https://cve.now/CVE-2021-34426.md): Arbitrary command execution in Keybase Client for Windows (CVSS 5.3, Zoom Video Communications Keybase Client for Windows)
- [CVE-2021-34425](https://cve.now/CVE-2021-34425.md): Server Side Request Forgery in Zoom Client for Meetings chat (CVSS 4.7, Zoom Video Communications Zoom Client for Meetings for A… +3)
- [CVE-2021-43829](https://cve.now/CVE-2021-43829.md): Unrestricted Upload of Files in Patrowl (CVSS 7.4, PatrowlManager)
- [CVE-2021-43830](https://cve.now/CVE-2021-43830.md): SQL injection in OpenProject (CVSS 7.4, opf openproject)
- [CVE-2021-43828](https://cve.now/CVE-2021-43828.md): Improper Privilege Management in Patrowl (CVSS 7.5, PatrowlManager)
- [CVE-2021-43051](https://cve.now/CVE-2021-43051.md): TIBCO Spotfire Server API Authorization Vulnerability (CVSS 7.1, TIBCO Software TIBCO Spotfire Server)
- [CVE-2021-43821](https://cve.now/CVE-2021-43821.md): Files Accessible to External Parties in Opencast (CVSS 9.9, opencast · org.opencastproject:opencast-ingest-service-impl)
- [CVE-2021-43820](https://cve.now/CVE-2021-43820.md): Permissions check bypass in Seafile (CVSS 7.4, haiwen seafile-server)
- [CVE-2021-4044](https://cve.now/CVE-2021-4044.md): Invalid handling of X509\_verify\_cert() internal errors in libssl (no CVSS, OpenSSL · openssl-src)
- [CVE-2018-10228](https://cve.now/CVE-2018-10228.md): Cross-site scripting (XSS) vulnerability in /application/controller/admin/theme.php in LimeSurvey 3.6.2+180406 allows remote attackers to in (no CVSS)
- [CVE-2021-43807](https://cve.now/CVE-2021-43807.md): HTTP Method Spoofing in Opencast (CVSS 7.5, opencast · org.opencastproject:opencast-common)
- [CVE-2021-40883](https://cve.now/CVE-2021-40883.md): A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins. (no CVSS)
- [CVE-2021-43388](https://cve.now/CVE-2021-43388.md): Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. (no CVSS)
- [CVE-2021-40882](https://cve.now/CVE-2021-40882.md): A Cross Site Scripting (XSS) vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location. (no CVSS)
- [CVE-2021-44043](https://cve.now/CVE-2021-44043.md): An issue was discovered in UiPath App Studio 21.4.4. (no CVSS)
- [CVE-2021-44041](https://cve.now/CVE-2021-44041.md): UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI h (no CVSS)
- [CVE-2021-44042](https://cve.now/CVE-2021-44042.md): An issue was discovered in UiPath Assistant 21.4.4. (no CVSS)
- [CVE-2021-45046](https://cve.now/CVE-2021-45046.md): Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack (CVSS 9.0, KEV, Apache Software Foundation Apache Log4j · org.apache.log… +1)
- [CVE-2021-38950](https://cve.now/CVE-2021-38950.md): IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. (CVSS 7.4, IBM MQ for HPE NonStop)
- [CVE-2021-39313](https://cve.now/CVE-2021-39313.md): Simple Image Gallery \<= 1.0.6 Reflected Cross-Site Scripting (CVSS 6.1, Simple Image Gallery)
- [CVE-2021-39310](https://cve.now/CVE-2021-39310.md): Real WYSIWYG \<= 0.0.2 Reflected Cross-Site Scripting (CVSS 6.1, Real WYSIWYG)
- [CVE-2021-39312](https://cve.now/CVE-2021-39312.md): True Ranker \<= 2.2.2 Directory Traversal/Arbitrary File Read (CVSS 7.5, True Ranker)
- [CVE-2021-39308](https://cve.now/CVE-2021-39308.md): WooCommerce myghpay Payment Gateway \<= 3.0 Reflected Cross-Site Scripting (CVSS 6.1, WooCommerce myghpay Payment Gateway)
- [CVE-2021-4073](https://cve.now/CVE-2021-4073.md): RegistrationMagic \<= 5.0.1.7 Authentication Bypass (CVSS 9.8, RegistrationMagic)
- [CVE-2021-38361](https://cve.now/CVE-2021-38361.md): .htaccess Redirect \<= 0.3.1 Reflected Cross-Site Scripting (CVSS 6.1, .htaccess Redirect)
- [CVE-2021-39311](https://cve.now/CVE-2021-39311.md): link-list-manager \<= 1.0 Reflected Cross-Site Scripting (CVSS 6.1, link-list-manager)
- [CVE-2021-39309](https://cve.now/CVE-2021-39309.md): Parsian Bank Gateway for Woocommerce \<= 1.0 Reflected Cross-Site Scripting (CVSS 6.1, Parsian Bank Gateway for Woocommerce)
- [CVE-2021-39314](https://cve.now/CVE-2021-39314.md): WooCommerce EnvioPack \<= 1.2 Reflected Cross-Site Scripting (CVSS 6.1, WooCommerce EnvioPack)
- [CVE-2021-39318](https://cve.now/CVE-2021-39318.md): H5P CSS Editor \<= 1.0 Reflected Cross-Site Scripting (CVSS 6.1, H5P CSS Editor)
- [CVE-2021-41836](https://cve.now/CVE-2021-41836.md): Fathom Analytics \<= 3.0.4 Authenticated Stored Cross-Site Scripting (CVSS 4.8, Fathom Analytics)
- [CVE-2021-42367](https://cve.now/CVE-2021-42367.md): Variation Swatches for WooCommerce \<= 2.1.1 Authenticated Stored Cross-Site Scripting (CVSS 6.4, Variation Swatches for WooCommerce)
- [CVE-2021-39319](https://cve.now/CVE-2021-39319.md): duoFAQ - Responsive, Flat, Simple FAQ \<= 1.4.8 Reflected Cross-Site Scripting (CVSS 6.1, duoFAQ - Responsive, Flat, Simple FAQ)
- [CVE-2021-39315](https://cve.now/CVE-2021-39315.md): Magic Post Voice \<= 1.2 Reflected Cross-Site Scripting (CVSS 6.1, Magic Post Voice)
- [CVE-2021-42061](https://cve.now/CVE-2021-42061.md): SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, re (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2021-42068](https://cve.now/CVE-2021-42068.md): When a user opens a manipulated GIF (.gif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the applic (no CVSS, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-42064](https://cve.now/CVE-2021-42064.md): If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP C (no CVSS, SAP SE SAP Commerce)
- [CVE-2021-42070](https://cve.now/CVE-2021-42070.md): When a user opens manipulated Jupiter Tessellation (.jt) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9 (no CVSS, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-38182](https://cve.now/CVE-2021-38182.md): Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can comple (no CVSS, SAP SE Kyma)
- [CVE-2021-42069](https://cve.now/CVE-2021-42069.md): When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - vers (no CVSS, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-42063](https://cve.now/CVE-2021-42063.md): A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. (no CVSS, SAP SE SAP Knowledge Warehouse)
- [CVE-2021-42066](https://cve.now/CVE-2021-42066.md): SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypte (no CVSS, SAP SE SAP Business One)
- [CVE-2021-44232](https://cve.now/CVE-2021-44232.md): SAF-T Framework Transaction SAFTN\_G allows an attacker to exploit insufficient validation of path information provided by normal user, leadi (no CVSS, SAP SE SAF-T Framework)
- [CVE-2021-44235](https://cve.now/CVE-2021-44235.md): Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756 (no CVSS, SAP SE SAP NetWeaver AS ABAP)
- [CVE-2021-44231](https://cve.now/CVE-2021-44231.md): Internally used text extraction reports allow an attacker to inject code that can be executed by the application. (no CVSS, SAP SE SAP ABAP Server & ABAP Platform)
- [CVE-2021-44233](https://cve.now/CVE-2021-44233.md): SAP GRC Access Control - versions V1100\_700, V1100\_731, V1200\_750, does not perform necessary authorization checks for an authenticated user (no CVSS, SAP SE SAP GRC Access Control)
- [CVE-2021-41065](https://cve.now/CVE-2021-41065.md): An issue was discovered in Listary through 6. (no CVSS)
- [CVE-2021-41066](https://cve.now/CVE-2021-41066.md): An issue was discovered in Listary through 6. (no CVSS)
- [CVE-2021-41067](https://cve.now/CVE-2021-41067.md): An issue was discovered in Listary through 6. (no CVSS)
- [CVE-2021-3836](https://cve.now/CVE-2021-3836.md): Improper Restriction of XML External Entity Reference in dbeaver/dbeaver (CVSS 9.8, dbeaver/dbeaver)
- [CVE-2021-44549](https://cve.now/CVE-2021-44549.md): SMTPS server hostname not checked when making TLS connection to SMTPS server (no CVSS, Apache Software Foundation Apache Sling Commons Messaging M…)
- [CVE-2021-4007](https://cve.now/CVE-2021-4007.md): Rapid7 Insight Agent Privilege Escalation (CVSS 7.8, Rapid7 Insight Agent)
- [CVE-2021-4107](https://cve.now/CVE-2021-4107.md): Cross-site Scripting (XSS) - Reflected in yetiforcecompany/yetiforcecrm (CVSS 5.3, yetiforcecompany/yetiforcecrm · yetiforce/yetiforce-crm)
- [CVE-2021-42051](https://cve.now/CVE-2021-42051.md): An issue was discovered in AbanteCart before 1.3.2. (no CVSS)
- [CVE-2021-44949](https://cve.now/CVE-2021-44949.md): glFusion CMS 1.7.9 is affected by an access control vulnerability via /public\_html/users.php. (no CVSS)
- [CVE-2021-42050](https://cve.now/CVE-2021-42050.md): An issue was discovered in AbanteCart before 1.3.2. (no CVSS)
- [CVE-2021-36721](https://cve.now/CVE-2021-36721.md): Sysaid - Sysaid API User Enumeration (CVSS 4.4, SysAid API)
- [CVE-2021-45015](https://cve.now/CVE-2021-45015.md): taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\\include\\Model\\file.php from line 60 to line 72. (no CVSS)
- [CVE-2021-45014](https://cve.now/CVE-2021-45014.md): There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26 (no CVSS)
- [CVE-2021-44538](https://cve.now/CVE-2021-44538.md): The olm\_session\_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. (no CVSS)
- [CVE-2021-3376](https://cve.now/CVE-2021-3376.md): An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted P (no CVSS)
- [CVE-2021-44937](https://cve.now/CVE-2021-44937.md): glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public\_html/users.php. (no CVSS)
- [CVE-2021-44524](https://cve.now/CVE-2021-44524.md): A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2. (no CVSS, Siemens SiPass integrated · Siemens Siveillance Identity)
- [CVE-2021-44523](https://cve.now/CVE-2021-44523.md): A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2. (no CVSS, Siemens SiPass integrated · Siemens Siveillance Identity)
- [CVE-2021-44522](https://cve.now/CVE-2021-44522.md): A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2. (no CVSS, Siemens SiPass integrated · Siemens Siveillance Identity)
- [CVE-2021-44449](https://cve.now/CVE-2021-44449.md): A vulnerability has been identified in JT Utilities (All versions \< V12.8.1.1), JTTK (All versions \< V10.8.1.1). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44450](https://cve.now/CVE-2021-44450.md): A vulnerability has been identified in JT Utilities (All versions \< V12.8.1.1), JTTK (All versions \< V10.8.1.1). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44448](https://cve.now/CVE-2021-44448.md): A vulnerability has been identified in JT Utilities (All versions \< V13.0.3.0), JTTK (All versions \< V11.0.3.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44447](https://cve.now/CVE-2021-44447.md): A vulnerability has been identified in JT Utilities (All versions \< V13.0.3.0), JTTK (All versions \< V11.0.3.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44445](https://cve.now/CVE-2021-44445.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44446](https://cve.now/CVE-2021-44446.md): A vulnerability has been identified in JT Utilities (All versions \< V13.0.3.0), JTTK (All versions \< V11.0.3.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44444](https://cve.now/CVE-2021-44444.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44443](https://cve.now/CVE-2021-44443.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44442](https://cve.now/CVE-2021-44442.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44441](https://cve.now/CVE-2021-44441.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44440](https://cve.now/CVE-2021-44440.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44438](https://cve.now/CVE-2021-44438.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44439](https://cve.now/CVE-2021-44439.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44437](https://cve.now/CVE-2021-44437.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44436](https://cve.now/CVE-2021-44436.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44434](https://cve.now/CVE-2021-44434.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44435](https://cve.now/CVE-2021-44435.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44433](https://cve.now/CVE-2021-44433.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44432](https://cve.now/CVE-2021-44432.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44430](https://cve.now/CVE-2021-44430.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44431](https://cve.now/CVE-2021-44431.md): A vulnerability has been identified in JT Utilities (All versions \< V13.1.1.0), JTTK (All versions \< V11.1.1.0). (no CVSS, Siemens JT Utilities · Siemens JTTK)
- [CVE-2021-44165](https://cve.now/CVE-2021-44165.md): A vulnerability has been identified in POWER METER SICAM Q100 (All versions \< V2.41), POWER METER SICAM Q100 (All versions \< V2.41), POWER M (no CVSS, Siemens POWER METER SICAM Q100)
- [CVE-2021-44017](https://cve.now/CVE-2021-44017.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44014](https://cve.now/CVE-2021-44014.md): A vulnerability has been identified in JT Open (All versions \< V11.1.1.0), JT Utilities (All versions \< V13.1.1.0), Solid Edge (All versions (CVSS 7.8, Siemens JT Open · Siemens JT Utilities +1)
- [CVE-2021-44015](https://cve.now/CVE-2021-44015.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44013](https://cve.now/CVE-2021-44013.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44012](https://cve.now/CVE-2021-44012.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44011](https://cve.now/CVE-2021-44011.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44009](https://cve.now/CVE-2021-44009.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44010](https://cve.now/CVE-2021-44010.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44008](https://cve.now/CVE-2021-44008.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44007](https://cve.now/CVE-2021-44007.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44005](https://cve.now/CVE-2021-44005.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44006](https://cve.now/CVE-2021-44006.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44004](https://cve.now/CVE-2021-44004.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44002](https://cve.now/CVE-2021-44002.md): A vulnerability has been identified in JT Open (All versions \< V11.1.1.0), JT Utilities (All versions \< V13.1.1.0), Solid Edge (All versions (CVSS 7.8, Siemens JT Open · Siemens JT Utilities +1)
- [CVE-2021-44003](https://cve.now/CVE-2021-44003.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-44001](https://cve.now/CVE-2021-44001.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.5), Teamcenter Visualization (All versions \< V13.2.0.5). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-42027](https://cve.now/CVE-2021-42027.md): A vulnerability has been identified in SINUMERIK Edge (All versions \< V3.2). (no CVSS, Siemens SINUMERIK Edge)
- [CVE-2021-42024](https://cve.now/CVE-2021-42024.md): A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions \< 2021.3.1). (no CVSS, Siemens Simcenter STAR-CCM+ Viewer)
- [CVE-2021-42022](https://cve.now/CVE-2021-42022.md): A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions \< V21.00 SP3). (no CVSS, Siemens SIMATIC eaSie PCS 7 Skill Package)
- [CVE-2021-41547](https://cve.now/CVE-2021-41547.md): A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \< V4.3.11), Teamcenter Active Workspace V5.0 (All vers (no CVSS, Siemens Teamcenter Active Workspace)
- [CVE-2021-44935](https://cve.now/CVE-2021-44935.md): glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public\_html/comment.php. (no CVSS)
- [CVE-2021-3831](https://cve.now/CVE-2021-3831.md): Cross-site Scripting (XSS) - Reflected in gnuboard/gnuboard5 (CVSS 7.1, gnuboard/gnuboard5)
- [CVE-2021-4104](https://cve.now/CVE-2021-4104.md): Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 (CVSS 7.5, Apache Software Foundation Apache Log4j 1.x · log4j:log4j +1)
- [CVE-2021-42023](https://cve.now/CVE-2021-42023.md): A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). (no CVSS, Siemens ModelSim Simulation · Siemens Questa Simulation)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.