CVE-2021-40265

HighCVSS 8.8/10Last modified Jun 17, 2026

Related CVEs from 2021

CVE-2021-402666.5FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.CVE-2021-402726.1OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).CVE-2021-402797.2An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php.CVE-2021-40287.8A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a soCVE-2021-402807.2An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php.CVE-2021-402818.8An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary users.CVE-2021-402828.8An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php. when registering ordinary users.CVE-2021-402846.5D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the webCVE-2021-402858.1htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php.CVE-2021-402887.5A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated CVE-2021-402896.1mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).CVE-2021-40298.8A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary OS comma
CVE-2021-40265: High severity, CVSS 8.8 | Vulnix