CVE Arsenal Intel

CVE-2021-32030

🔥 KEV Software Genérico Web Networking ⚡ nuclei

9.8

CRITICAL

EPSS

94.2%

2021 0 PoCs

The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\0' matches the device's default value of '\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitiga

nuclei -t CVE-2021-32030.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2021-23639

md-to-pdf General

9.8

CRITICAL

EPSS

19.9%

2021 2 PoCs

The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

Sin template local disponible

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2021-36226

Software Genérico Cloud

9.8

CRITICAL

EPSS

0.2%

2021 1 PoC

Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-21943

ImageGear General

9.8

CRITICAL

EPSS

1.2%

2021 CWE-122 1 PoC

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-35617

WebLogic Server DevOps Database

9.8

CRITICAL

EPSS

4.2%

2021 1 PoC

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-45466

Software Genérico Web

9.8

CRITICAL

EPSS

4.2%

2021 1 PoC

In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an authorized_keys text file in the /resources/ folder.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-4380

Pinterest Automatic Web Windows ⚡ nuclei

9.8

CRITICAL

EPSS

81.3%

2021 CWE-284 0 PoCs

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wp_pinterest_automatic_parse_request' function and the 'process_form.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to update arbitrary options on a site that can be used to create new administrative user accounts or redirect unsuspecting site visitors.

nuclei -t CVE-2021-4380.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2021-33990

Software Genérico General

9.8

CRITICAL

EPSS

66.4%

2021 1 PoC

Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the exploit reference link only shows frmfolders.html is accessible and does not demonstrate how an unauthorized user can upload a file.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-25915

changeset General

9.8

CRITICAL

EPSS

2.9%

2021 1 PoC

Prototype pollution vulnerability in 'changeset' versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of service and may lead to remote code execution.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-35464

🔥 KEV Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2021 4 PoCs

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier

nuclei -t CVE-2021-35464.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 🔍 GCVE ⚔ EDB

CVE-2021-36260

🔥 KEV Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2021 8 PoCs

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

nuclei -t CVE-2021-36260.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +2 más 🔍 GCVE ⚔ EDB

CVE-2021-21901

Garrett Metal Detectors General

9.8

CRITICAL

EPSS

0.2%

2021 CWE-120 1 PoC

A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this vulnerability.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-1994

WebLogic Server Web Database

9.8

CRITICAL

EPSS

27.8%

2021 1 PoC

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-30168

P2/Z2/P3/Z3 IP camera firmware General

9.8

CRITICAL

EPSS

1.8%

2021 CWE-200 1 PoC

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-2136

WebLogic Server Database

9.8

CRITICAL

EPSS

4.8%

2021 1 PoC

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-21793

Accusoft General

9.8

CRITICAL

EPSS

0.4%

2021 CWE-131 1 PoC

An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing functionality of Accusoft ImageGear 19.8 and 19.9. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-3878

stanfordnlp/corenlp General

9.8

CRITICAL

EPSS

0.3%

2021 CWE-611 1 PoC

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-2397

WebLogic Server Database

9.8

CRITICAL

EPSS

2.3%

2021 1 PoC

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Sin template local disponible

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2021-39226

🔥 KEV grafana DevOps Web ⚡ nuclei

9.8

CRITICAL

EPSS

94.3%

2021 CWE-287 0 PoCs

Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot "public_mode" configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey. Regardless of the snapshot "public_mode" setting, authenticated users are able to delete the snapshot wit

nuclei -t CVE-2021-39226.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2021-44515

🔥 KEV Software Genérico General ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2021 0 PoCs

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. For MSP builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For MSP builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3.

nuclei -t CVE-2021-44515.yaml ⎘

🔍 GCVE ⚔ EDB