Week 46, 2021

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users

  metabase · metabase

  EPSS 97%
• Critical 9.8
  CVE-2021-44026 Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
  EPSS 70%
• Critical 9.8
  CVE-2021-37580 Apache ShenYu Admin bypass JWT authentication

  Apache Software Foundation · Apache ShenYu Admin

  EPSS 41%
• Critical 9.8
  CVE-2021-3958 SQL Injection Vulnerability in Ipack SCADA Software

  Ipack Automation Systems · Ipack SCADA Software

  EPSS 15%
• Critical 9.8
  CVE-2021-42338 4MOSAn GCB Doctor - Improper Authorization

  4MOSAn · GCB Doctor

  EPSS 5.8%
• Critical 10.0
  CVE-2021-41269 Unauthenticated remote code injection in cron-utils

  jmrozanec · cron-utils

  EPSS 4.3%
• Critical 9.8
  CVE-2021-41280 OS command injection in Sharetribe Go

  sharetribe · sharetribe

  EPSS 3.4%
• Critical 10.0
  CVE-2021-40391 An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version …
  EPSS 3%
• Critical 9.0
  CVE-2021-42114 Scalable Rowhammering In the Frequency Domain to Bypass TRR Mitigations On Modern DDR4/LPDDR4X Devices

  Samsung · SK Hynix · Micron Technology · Micron lpddr4

  EPSS 3%
• Critical 9.1
  CVE-2021-41244 Cross organization admin control in Grafana

  Grafana · Grafana

  EPSS 2.9%
• Critical 9.8
  CVE-2021-36372 Original block tokens are persisted and can be retrieved

  Apache Software Foundation · Apache Ozone

  EPSS 2.5%
• Critical 9.1
  CVE-2021-39233 Container-related datanode operations can be called without authorization

  Apache Software Foundation · Apache Ozone

  EPSS 2.4%
• Critical 9.1
  CVE-2021-39231 Missing authentication/authorization on internal RPC endpoints

  Apache Software Foundation · Apache Ozone

  EPSS 2.4%
• Critical 9.8
  CVE-2021-43996 Incorrect Access Control in Ignition
  EPSS 1.7%
• Critical 9.8
  CVE-2021-43048 TIBCO PartnerExpress Click-Jacking vulnerability

  TIBCO Software · TIBCO PartnerExpress

  EPSS 1.3%

All 21 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2021-42362 WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload

  WordPress Popular Posts · WordPress Popular Posts

  EPSS 80%
• Unscored
  CVE-2021-41951 ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the wordpress_use…
  EPSS 78%
• Unscored
  CVE-2021-41950 A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace se…
  EPSS 75%
• Unscored
  CVE-2021-41765 A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 < rev 18274 allows remote unauthenticated attackers to execute a…
  EPSS 68%
• High 8.6
  CVE-2021-41266 Authentication bypass issue in the Operator Console

  minio · console

  EPSS 48%
• High 7.3
  CVE-2021-43555 mySCADA myDESIGNER

  mySCADA · myDESIGNER

  EPSS 38%
• High 7.6
  CVE-2021-22053 Code injection in spring-cloud-netflix-hystrix-dashboard
  EPSS 13%
• Unscored
  CVE-2021-42580 Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and authenticated file up…
  EPSS 10%