Week 31, 2021

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2021-21805 An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A specially crafted HTTP request…
  EPSS 70%
• Critical 9.8
  CVE-2021-20028 Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA…

  SonicWall · SonicWall SRA/SMA100

  EPSS 30%
• Critical 9.8
  CVE-2021-34371 Deserialization of Untrusted Data in Neo4j
  EPSS 13%
• Critical 9.8
  CVE-2021-1609 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities

  Cisco · Cisco Small Business RV Series Router Firmware

  EPSS 9.7%
• Critical 9.8
  CVE-2021-1610 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities

  Cisco · Cisco Small Business RV Series Router Firmware

  EPSS 9.1%
• Critical 9.8
  CVE-2021-33527 OS Command Injection in mbDIALUP <= 3.9R0.0

  MB connect line · mbDIALUP

  EPSS 4.5%
• Critical 9.8
  CVE-2021-38196 Remote code execution in better-macro
  EPSS 2.6%
• Critical 9.8
  CVE-2021-26606 DreamSecurity MagicLine Buffer Overflow Vulnerability

  Dream Security · MagicLine4NX.exe

  EPSS 2.4%
• Critical
  CVE-2020-28088 Jeecg-Boot CMS arbitrary file upload vulnerability
  EPSS 2.3%
• Critical 9.9
  CVE-2021-32016 An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remot…
  EPSS 2.3%
• Critical 9.8
  CVE-2021-38197 Tarslip in go-unarr
  EPSS 2.1%
• Critical 9.8
  CVE-2021-32810 Data race in crossbeam-deque

  crossbeam-rs · crossbeam

  EPSS 1.9%
• Critical 9.9
  CVE-2021-32590 Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 thro…

  Fortinet · Fortinet FortiPortal

  EPSS 1.7%
• Critical 9.8
  CVE-2021-37843 The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known (i.e., no other authenti…
  EPSS 1.5%
• Critical 9.8
  CVE-2021-38189 SMTP command injection in lettre
  EPSS 1.5%

All 28 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 5.3
  CVE-2021-26085 Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability …

  Atlassian · Confluence Data Center · Confluence Server

  EPSS 100%
• High 7.8
  CVE-2021-34833 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required t…

  Foxit · PDF Reader

  EPSS 96%
• High 7.8
  CVE-2021-34847 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required t…

  Foxit · PDF Reader

  EPSS 62%
• High 7.6
  CVE-2021-32706 (Authenticated) Remote Code Execution Possible in Web Interface 5.5

  pi-hole · AdminLTE

  EPSS 60%
• Unscored
  CVE-2021-24472 Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF

  QantumThemes · OnAir2 · QT KenthaRadio

  EPSS 57%
• High 7.8
  CVE-2021-34850 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required t…

  Foxit · PDF Reader

  EPSS 38%
• Unscored
  CVE-2021-37557 A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers …
  EPSS 27%
• Unscored
  CVE-2021-37556 A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers …
  EPSS 27%