CVE-2021-23000 to CVE-2021-23999

156 CVEs with public proof-of-concept exploits.

• CVE-2021-230179 PoCsA security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to…
• CVE-2021-230241 PoCOn version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command…
• CVE-2021-231322 PoCs[20210306] - Core - com_media allowed paths that are not intended for image uploads
• CVE-2021-231331 PoCLinux Kernel sctp_destroy_sock race condition
• CVE-2021-231581 PoCA flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition…
• CVE-2021-231591 PoCA vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability…
• CVE-2021-231651 PoCA flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary…
• CVE-2021-231801 PoCA flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary…
• CVE-2021-231911 PoCA security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may…
• CVE-2021-232061 PoCA flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to execute arbitrary…
• CVE-2021-232411 PoCMERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication…
• CVE-2021-233271 PoCCross-site Scripting (XSS)
• CVE-2021-233281 PoCPrototype Pollution
• CVE-2021-233292 PoCsPrototype Pollution
• CVE-2021-233301 PoCCommand Injection
• CVE-2021-233351 PoCLDAP Injection
• CVE-2021-233377 PoCsCommand Injection
• CVE-2021-233381 PoCDeserialization of Untrusted Data
• CVE-2021-233401 PoCLocal File Inclusion
• CVE-2021-233413 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-233423 PoCsCross-site Scripting (XSS)
• CVE-2021-233432 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-233441 PoCRemote Code Execution (RCE)
• CVE-2021-233463 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-233482 PoCsArbitrary Command Injection
• CVE-2021-233521 PoCCommand Injection
• CVE-2021-233552 PoCsArbitrary Command Injection
• CVE-2021-233561 PoCArbitrary Command Injection
• CVE-2021-233585 PoCsArbitrary Code Injection
• CVE-2021-233591 PoCArbitrary Command Injection
• CVE-2021-233601 PoCArbitrary Command Injection
• CVE-2021-233622 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-233631 PoCArbitrary Command Injection
• CVE-2021-233642 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-233682 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-233695 PoCsRemote Code Execution (RCE)
• CVE-2021-233705 PoCsPrototype Pollution
• CVE-2021-233731 PoCPrototype Pollution
• CVE-2021-233741 PoCArbitrary Command Injection
• CVE-2021-233751 PoCArbitrary Command Injection
• CVE-2021-233761 PoCArbitrary Command Injection
• CVE-2021-233771 PoCArbitrary Command Injection
• CVE-2021-233781 PoCArbitrary Command Injection
• CVE-2021-233791 PoCArbitrary Command Injection
• CVE-2021-233801 PoCArbitrary Command Injection
• CVE-2021-233811 PoCArbitrary Command Injection
• CVE-2021-233823 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-233835 PoCsPrototype Pollution
• CVE-2021-233841 PoCOpen Redirect
• CVE-2021-233851 PoCOpen Redirect
• CVE-2021-233871 PoCOpen Redirect
• CVE-2021-233881 PoCRegular Expression Denial of Service (ReDoS)
• CVE-2021-233891 PoCArbitrary Code Execution
• CVE-2021-233901 PoCArbitrary Code Execution
• CVE-2021-233911 PoCArbitrary File Write via Archive Extraction (Zip Slip)
• CVE-2021-233921 PoCRegular Expression Denial of Service (ReDoS)
• CVE-2021-233943 PoCsRemote Code Execution (RCE)
• CVE-2021-233951 PoCPrototype Pollution
• CVE-2021-233961 PoCPrototype Pollution
• CVE-2021-233971 PoCPrototype Pollution
• CVE-2021-233982 PoCsCross-site Scripting (XSS)
• CVE-2021-233991 PoCArbitrary Command Injection
• CVE-2021-234002 PoCsHTTP Header Injection
• CVE-2021-234021 PoCPrototype Pollution
• CVE-2021-234031 PoCPrototype Pollution
• CVE-2021-234041 PoCCross-site Request Forgery (CSRF)
• CVE-2021-234051 PoCSQL Injection
• CVE-2021-234062 PoCsRemote Code Execution (RCE)
• CVE-2021-234071 PoCDirectory Traversal
• CVE-2021-234081 PoCPrototype Pollution
• CVE-2021-234112 PoCsCross-site Scripting (XSS)
• CVE-2021-234121 PoCCommand Injection
• CVE-2021-234133 PoCsDenial of Service (DoS)
• CVE-2021-234143 PoCsCross-site Scripting (XSS)
• CVE-2021-234151 PoCDirectory Traversal
• CVE-2021-234161 PoCCross-site Scripting (XSS)
• CVE-2021-234171 PoCPrototype Pollution
• CVE-2021-234191 PoCPrototype Pollution
• CVE-2021-234201 PoCDeserialization of Untrusted Data
• CVE-2021-234211 PoCPrototype Pollution
• CVE-2021-234242 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-234252 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-234261 PoCPrototype Pollution
• CVE-2021-234271 PoCArbitrary File Write via Archive Extraction (Zip Slip)
• CVE-2021-234291 PoCDenial of Service (DoS)
• CVE-2021-234301 PoCDirectory Traversal
• CVE-2021-234321 PoCPrototype Pollution
• CVE-2021-234331 PoCPrototype Pollution
• CVE-2021-234342 PoCsPrototype Pollution
• CVE-2021-234362 PoCsPrototype Pollution
• CVE-2021-234382 PoCsPrototype Pollution
• CVE-2021-234403 PoCsPrototype Pollution
• CVE-2021-234421 PoCPrototype Pollution
• CVE-2021-234431 PoCCross-site Scripting (XSS)
• CVE-2021-234443 PoCsPrototype Pollution
• CVE-2021-234453 PoCsCross-site Scripting (XSS)
• CVE-2021-234471 PoCCross-site Scripting (XSS)
• CVE-2021-234481 PoCPrototype Pollution
• CVE-2021-234491 PoCSandbox Bypass
• CVE-2021-234505 PoCsPrototype Pollution
• CVE-2021-234521 PoCPrototype Pollution
• CVE-2021-234602 PoCsPrototype Pollution
• CVE-2021-234631 PoCXML External Entity (XXE) Injection
• CVE-2021-234701 PoCPrototype Pollution
• CVE-2021-234726 PoCsCross-site Scripting (XSS)
• CVE-2021-234841 PoCArbitrary File Write via Archive Extraction (Zip Slip)
• CVE-2021-234902 PoCsRegular Expression Denial of Service (ReDoS)
• CVE-2021-234971 PoCPrototype Pollution
• CVE-2021-235071 PoCPrototype Pollution
• CVE-2021-235092 PoCsPrototype Pollution
• CVE-2021-235141 PoCPath Traversal
• CVE-2021-235182 PoCsPrototype Pollution
• CVE-2021-235431 PoCSandbox Bypass
• CVE-2021-235551 PoCSandbox Bypass
• CVE-2021-235561 PoCExposed Dangerous Method or Function
• CVE-2021-235581 PoCPrototype Pollution
• CVE-2021-235611 PoCPrototype Pollution
• CVE-2021-235662 PoCsInformation Exposure
• CVE-2021-235681 PoCPrototype Pollution
• CVE-2021-235743 PoCsPrototype Pollution
• CVE-2021-235941 PoCSandbox Bypass
• CVE-2021-235971 PoCDenial of Service (DoS)
• CVE-2021-236241 PoCPrototype Pollution
• CVE-2021-236314 PoCsDirectory Traversal
• CVE-2021-236321 PoCRemote Code Execution (RCE)
• CVE-2021-236393 PoCsRemote Code Execution (RCE)
• CVE-2021-236481 PoCCross-site Scripting (XSS)
• CVE-2021-236541 PoCImproper Input Validation
• CVE-2021-236631 PoCPrototype Pollution
• CVE-2021-236641 PoCServer-side Request Forgery (SSRF)
• CVE-2021-236731 PoCCross-site Scripting (XSS)
• CVE-2021-236822 PoCsPrototype Pollution
• CVE-2021-237001 PoCPrototype Pollution
• CVE-2021-237021 PoCPrototype Pollution
• CVE-2021-237181 PoCServer-side Request Forgery (SSRF)
• CVE-2021-237271 PoCStored Command Injection
• CVE-2021-237582 PoCsKEVDeserialization of Untrusted Data
• CVE-2021-237601 PoCPrototype Pollution
• CVE-2021-237712 PoCsSandbox Bypass
• CVE-2021-237722 PoCsArbitrary File Write
• CVE-2021-237841 PoCCross-site Scripting (XSS)
• CVE-2021-237972 PoCsDirectory Traversal
• CVE-2021-238031 PoCAccess Control Bypass
• CVE-2021-238072 PoCsPrototype Pollution
• CVE-2021-238202 PoCsPrototype Pollution
• CVE-2021-238241 PoCContent Injection
• CVE-2021-238351 PoCAn issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP…
• CVE-2021-238361 PoCAn issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request…
• CVE-2021-238371 PoCAn issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP…
• CVE-2021-238381 PoCAn issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request…
• CVE-2021-238401 PoCInteger overflow in CipherUpdate
• CVE-2021-238412 PoCsNull pointer deref in X509_issuer_and_serial_hash()
• CVE-2021-239561 PoCAn ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole…
• CVE-2021-239801 PoCA mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title…
• CVE-2021-239911 PoCIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's…
• CVE-2021-239991 PoCIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional…