Home / 2021 Advisories Archive

2021 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	25 Jan 2021	23 Nov 2022	CPAI-2019-2414		CVE-2019-16057	D-Link DNS-320 ShareCenter Command Injection (CVE-2019-16057)
High	29 Apr 2021	6 Jun 2022	CPAI-2019-2459		CVE-2019-8315	D-Link DIR-878 Command Injection (CVE-2019-8315)
Critical	22 Feb 2021	22 May 2022	CPAI-2020-3256		CVE-2020-15568	TerraMaster TOS Command Injection (CVE-2020-15568)
High	27 Jul 2021	10 May 2022	CPAI-2021-0487		CVE-2021-36942 CVE-2022-26925	Microsoft Active Directory Certificate Services NTLM Relay (CVE-2021-36942; CVE-2022-26925)
High	20 Jul 2021	16 Feb 2022	CPAI-2021-0460		CVE-2021-42912	FiberHome Routers Command Injection (CVE-2021-42912)
High	16 Jun 2021	31 Jan 2022	CPAI-2020-3368		CVE-2020-11978 CVE-2020-13927	Apache Airflow Command Injection (CVE-2020-11978; CVE-2020-13927)
High	2 Aug 2021	23 Jan 2022	CPAI-2021-0328		CVE-2021-33514	NETGEAR Command Injection (CVE-2021-33514)
High	10 Jan 2021	20 Jan 2022	CPAI-2021-0005			Nessus Scanners Scanning Attempt
High	30 Dec 2021	30 Dec 2021	CPAI-2021-1019		CVE-2021-37921	Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-37921)
High	30 Dec 2021	30 Dec 2021	CPAI-2021-1018		CVE-2021-32682	ElFinder File Manager Command Injection (CVE-2021-32682)
Critical	30 Dec 2021	30 Dec 2021	CPAI-2021-1017		CVE-2021-34996	Commvault CommCell Authentication Bypass (CVE-2021-34996)
High	30 Dec 2021	30 Dec 2021	CPAI-2021-1016		CVE-2021-22795	Schneider Electric Struxureware Data Center Expert Command Injection (CVE-2021-22795)
High	30 Dec 2021	30 Dec 2021	CPAI-2021-1015		CVE-2021-22241	GitLab Community and Enterprise Cross-Site Scripting (CVE-2021-22241)
Critical	30 Dec 2021	30 Dec 2021	CPAI-2021-0951		CVE-2021-40870	Aviatrix Controller Directory Traversal (CVE-2021-40870)
High	29 Dec 2021	29 Dec 2021	CPAI-2021-1010		CVE-2021-33722	Siemens SINEC NMS Directory Traversal (CVE-2021-33722)
High	28 Dec 2021	28 Dec 2021	CPAI-2021-1003		CVE-2021-32983	Delta Electronics DIAEnergie SQL Injection (CVE-2021-32983)
High	28 Dec 2021	28 Dec 2021	CPAI-2021-1002		CVE-2021-20130	Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-20130)
High	28 Dec 2021	28 Dec 2021	CPAI-2021-0998		CVE-2021-39348	WordPress LearnPress Plugin Cross-Site Scripting (CVE-2021-39348)
High	28 Dec 2021	28 Dec 2021	CPAI-2021-0997		CVE-2021-24773	WordPress Download Manager Plugin Cross-Site Scripting (CVE-2021-24773)
High	28 Dec 2021	28 Dec 2021	CPAI-2021-0996		CVE-2021-21799	Advantech R-SeeNet telnet_form.php Cross-Site Scripting (CVE-2021-21799)
Medium	28 Dec 2021	28 Dec 2021	CPAI-2018-1791		CVE-2018-2380	SAP NetWeaver Remote Code Execution (CVE-2018-2380)
High	27 Dec 2021	27 Dec 2021	CPAI-2021-0993		CVE-2021-22794	Schneider Electric Struxureware Data Center Expert Directory Traversal (CVE-2021-22794)
High	27 Dec 2021	27 Dec 2021	CPAI-2021-0992		CVE-2021-41174	Grafana Cross-site Scripting (CVE-2021-41174)
High	27 Dec 2021	27 Dec 2021	CPAI-2021-0949		CVE-2021-43283	Victure WR1200 WiFi Router Command Injection (CVE-2021-43283)
Critical	27 Dec 2021	27 Dec 2021	CPAI-2021-0946		CVE-2021-30116	Kaseya VSA Remote Code Execution (CVE-2021-30116)
High	27 Dec 2021	27 Dec 2021	CPAI-2021-0940		CVE-2021-22053	VMware Spring Cloud Netflix Remote Code Execution (CVE-2021-22053)
Critical	23 Dec 2021	23 Dec 2021	CPAI-2020-3447		CVE-2020-22079	Tenda AC-10U AC1200 Router Denial of Service (CVE-2020-22079)
High	23 Dec 2021	23 Dec 2021	CPAI-2021-0915		CVE-2021-43339	Ericsson Network Location Command Injection (CVE-2021-43339)
High	22 Dec 2021	22 Dec 2021	CPAI-2020-3448		CVE-2020-8243	Pulse Connect Secure Command Injection (CVE-2020-8243)
High	22 Dec 2021	22 Dec 2021	CPAI-2021-0902		CVE-2021-33000	Advantech WebAccess HMI Designer Buffer Overflow (CVE-2021-33000)
Critical	21 Dec 2021	21 Dec 2021	CPAI-2021-0955		CVE-2021-45105	Apache Log4j Denial Of Service (CVE-2021-45105)
Critical	21 Dec 2021	21 Dec 2021	CPAI-2021-0941		CVE-2021-37832	Hotel Druid SQL Injection (CVE-2021-37832)
Critical	21 Dec 2021	21 Dec 2021	CPAI-2021-0933		CVE-2021-24866	WordPress WP Data Access Plugin SQL Injection (CVE-2021-24866)
High	21 Dec 2021	21 Dec 2021	CPAI-2021-0929		CVE-2021-43469	VINGA WR-N300U Router Command Injection (CVE-2021-43469)
Critical	21 Dec 2021	21 Dec 2021	CPAI-2021-0928		CVE-2021-36916	WordPress Hide My WP Plugin SQL Injection (CVE-2021-36916)
High	15 Dec 2021	15 Dec 2021	CPAI-2021-0919		CVE-2021-43408	WordPress Duplicate Post Plugin SQL Injection (CVE-2021-43408)
Critical	15 Dec 2021	15 Dec 2021	CPAI-2021-0918		CVE-2021-42667	Sourcecodester Online Event Booking and Reservation System SQL Injection (CVE-2021-42667)
High	14 Dec 2021	14 Dec 2021	CPAI-2021-0938	Microsoft CVE-2021-43883	CVE-2021-43883	Microsoft Windows Installer Elevation of Privilege (CVE-2021-43883)
High	14 Dec 2021	14 Dec 2021	CPAI-2021-0926	Microsoft CVE-2021-43207	CVE-2021-43207	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-43207)
Critical	14 Dec 2021	14 Dec 2021	CPAI-2021-0923	Microsoft CVE-2021-43233	CVE-2021-43233	Microsoft Remote Desktop Client Remote Code Execution (CVE-2021-43233)
High	14 Dec 2021	14 Dec 2021	CPAI-2021-0922	Microsoft CVE-2021-43226	CVE-2021-43226	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-43226)
High	14 Dec 2021	14 Dec 2021	CPAI-2021-0921	Microsoft CVE-2021-41333	CVE-2021-41333	Microsoft Windows Print Spooler Elevation of Privilege (CVE-2021-41333)
High	12 Dec 2021	12 Dec 2021	CPAI-2016-1167		CVE-2016-3976	SAP NetWeaver Directory Traversal (CVE-2016-3976)
Critical	8 Dec 2021	8 Dec 2021	CPAI-2021-0893		CVE-2021-41653	TP-Link TL-WR840N Router Command Injection (CVE-2021-41653)
Critical	8 Dec 2021	8 Dec 2021	CPAI-2020-3440		CVE-2020-16152	Aerohive Networks HiveOS Remote Code Execution (CVE-2020-16152)
Critical	5 Dec 2021	5 Dec 2021	CPAI-2021-0917		CVE-2021-35211	SolarWinds Serv-U Remote Code Execution (CVE-2021-35211)
High	5 Dec 2021	5 Dec 2021	CPAI-2021-0860		CVE-2021-40345	Nagios XI Command Injection (CVE-2021-40345)
Critical	2 Dec 2021	2 Dec 2021	CPAI-2020-3443		CVE-2020-3992	VMware ESXi Remote Code Execution (CVE-2020-3992)
Critical	2 Dec 2021	2 Dec 2021	CPAI-2021-0914		CVE-2021-27561	Yealink Device Management Command Injection (CVE-2021-27561)
Critical	2 Dec 2021	2 Dec 2021	CPAI-2021-0891		CVE-2021-41511	Lodging Reservation Management System SQL Injection (CVE-2021-41511)