Security Vulnerabilities - CVEs Published In 2021
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.
CVSS Score
7.5
EPSS Score
0.015
Published
2021-08-06
In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.
CVSS Score
4.3
EPSS Score
0.009
Published
2021-08-06
Cross-Site Scripting (XSS) vulnerability in Subrion 4.2.1 via the title when adding a page.
CVSS Score
6.1
EPSS Score
0.006
Published
2021-08-06
In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.
CVSS Score
9.8
EPSS Score
0.01
Published
2021-08-06
SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth, and (3) pyear parameters in GET requests sent to /modules/nursing/nursing-station.php.
CVSS Score
9.8
EPSS Score
0.019
Published
2021-08-06
In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter value of TR069 contains a trivial command injection where the value of the TR069_local_port parameter is passed directly to system.
CVSS Score
9.8
EPSS Score
0.026
Published
2021-08-06
In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter value of sysCMD contains a trivial command injection where the value of the command parameter is passed directly to system.
CVSS Score
9.8
EPSS Score
0.026
Published
2021-08-06
In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is passed directly to do_system.
CVSS Score
9.8
EPSS Score
0.026
Published
2021-08-06
In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router.
CVSS Score
7.5
EPSS Score
0.012
Published
2021-08-06
In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.
CVSS Score
6.5
EPSS Score
0.007
Published
2021-08-06