Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 106 of 273.
- CVE-2021-39376 SQL injection in philips:tasy electronic medical record
- CVE-2021-39375 SQL injection in philips:tasy electronic medical record
- CVE-2021-39373 Information disclosure in samsung:drive manager
- CVE-2021-39371 XML External Entity Injection in PyWPS
- CVE-2021-39369 Path traversal in philips:myvue
- CVE-2021-39368 Cross-site scripting in canon:oce print exec workgroup
- CVE-2021-39367 Other in canon:oce print exec workgroup
- CVE-2021-39365 Security feature bypass in debian:debian linux
- CVE-2021-39364 Auth bypass in honeywell:hbw2per1 firmware
- CVE-2021-39363 Other in honeywell:hbw2per1 firmware
- CVE-2021-39362 Cross-site scripting in recaptcha solver project:recaptcha solver
- CVE-2021-39361 Security feature bypass in gnome:evolution-rss
- CVE-2021-39360 Security feature bypass in fedoraproject:fedora
- CVE-2021-39359 Security feature bypass in fedoraproject:fedora
- CVE-2021-39358 Security feature bypass in fedoraproject:fedora
- CVE-2021-39357 Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting
- CVE-2021-39356 Content Staging <= 2.0.1 Authenticated Stored Cross-Site Scripting
- CVE-2021-39355 Indeed Job Importer <= 1.0.5 Authenticated Stored Cross-Site Scripting
- CVE-2021-39354 Easy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site Scripting
- CVE-2021-39353 Easy Registration Forms <= 2.1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-39352 Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload
- CVE-2021-39351 WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
- CVE-2021-39350 FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting
- CVE-2021-3935 SQL injection in pgbouncer
- CVE-2021-39349 Author Bio Box <= 3.3.1 Authenticated Stored Cross-Site Scripting
- CVE-2021-39348 LearnPress – WordPress LMS Plugin <= 4.1.3.1 Authenticated Stored Cross-Site Scripting
- CVE-2021-39347 Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking
- CVE-2021-39346 Google Maps Easy <= 1.9.33 Authenticated Stored Cross-Site Scripting
- CVE-2021-39345 HAL <= 2.1.1 Authenticated Stored Cross-Site Scripting
- CVE-2021-39344 KJM Admin Notices <= 2.0.1 Authenticated Stored Cross-Site Scripting
- CVE-2021-39343 MPL-Publisher – Self-publish your book & ebook <= 1.30.2 Authenticated Stored Cross-Site Scripting
- CVE-2021-39342 Credova_Financial <= 1.4.8 Sensitive Information Disclosure
- CVE-2021-39341 OptinMonster <= 2.6.4 Unprotected REST-API Endpoints
- CVE-2021-39340 Notification – Custom Notifications and Alerts for WordPress <= 7.2.4 Authenticated Stored Cross-Site Scripting
- CVE-2021-3934 OS Command Injection in ohmyzsh/ohmyzsh
- CVE-2021-39339 Telefication <= 1.8.0 Open Proxy and Server-Side Request Forgery
- CVE-2021-39338 MyBB Cross-Poster <= 1.0 Authenticated Stored Cross-Site Scripting
- CVE-2021-39337 job-portal <= 0.0.1 Authenticated Stored Cross-Site Scripting
- CVE-2021-39336 Job Manager <= 0.7.25 Authenticated Stored Cross-Site Scripting
- CVE-2021-39335 WpGenius Job Listing <= 1.0.2 Authenticated Stored Cross-Site Scripting
- CVE-2021-39334 Job Board Vanila Plugin <= 1.0 Authenticated Stored Cross-Site Scripting
- CVE-2021-39333 Hashthemes Demo Importer <= 1.1.1 Improper Access Control Allowing Content Deletion
- CVE-2021-39332 Cross-site scripting in Business Manager
- CVE-2021-3933 Integer overflow in openexr
- CVE-2021-39329 JobBoardWP – Job Board Listings and Submissions <= 1.0.7 Authenticated Stored Cross-Site Scripting
- CVE-2021-39328 Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting
- CVE-2021-39327 BulletProof Security <= 5.1 Sensitive Information Disclosure
- CVE-2021-39325 OptinMonster <= 2.6.0 Reflected Cross-Site Scripting
- CVE-2021-39322 Easy Social Icons <= 3.0.8 - Reflected Cross-Site Scripting
- CVE-2021-39321 Sassy Social Share 3.3.23 PHP Object Injection
- CVE-2021-39320 underConstruction <= 1.18 - Reflected Cross-Site Scripting
- CVE-2021-3932 Cross-Site Request Forgery (CSRF) in area17/twill
- CVE-2021-39319 duoFAQ - Responsive, Flat, Simple FAQ <= 1.4.8 Reflected Cross-Site Scripting
- CVE-2021-39318 H5P CSS Editor <= 1.0 Reflected Cross-Site Scripting
- CVE-2021-39317 AccessPress Themes - Authenticated Malicious File Upload
- CVE-2021-39316 ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure
- CVE-2021-39315 Magic Post Voice <= 1.2 Reflected Cross-Site Scripting
- CVE-2021-39314 WooCommerce EnvioPack <= 1.2 Reflected Cross-Site Scripting
- CVE-2021-39313 Simple Image Gallery <= 1.0.6 Reflected Cross-Site Scripting
- CVE-2021-39312 True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read
- CVE-2021-39311 link-list-manager <= 1.0 Reflected Cross-Site Scripting
- CVE-2021-39310 Real WYSIWYG <= 0.0.2 Reflected Cross-Site Scripting
- CVE-2021-3931 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
- CVE-2021-39309 Parsian Bank Gateway for Woocommerce <= 1.0 Reflected Cross-Site Scripting
- CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting
- CVE-2021-39307 Cross-site scripting in pdftron:webviewer ui
- CVE-2021-39306 Memory corruption in realtek:rtl8195am firmware
- CVE-2021-39304 Security feature bypass in proofpoint:enterprise protection
- CVE-2021-39303 Server-side request forgery in jamf:jamf
- CVE-2021-39302 SQL injection in misp-project:misp
- CVE-2021-39301 Privilege escalation in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
- CVE-2021-39300 Privilege escalation in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
- CVE-2021-3930 Memory corruption in QEMU
- CVE-2021-39299 Privilege escalation in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
- CVE-2021-39298 Privilege escalation in 2nd Gen EPYC
- CVE-2021-39297 Privilege escalation in BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
- CVE-2021-39296 Auth bypass in openbmc-project:openbmc
- CVE-2021-39295 Denial of service in openbmc-project:openbmc
- CVE-2021-39293 Denial of service in golang:go
- CVE-2021-39291 Information disclosure in netmodule:netmodule router software
- CVE-2021-39290 Auth bypass in netmodule:netmodule router software
- CVE-2021-3929 Use after free in QEMU
- CVE-2021-39289 Weak cryptography in netmodule:netmodule router software
- CVE-2021-39286 Cross-site scripting in pywb
- CVE-2021-39285 Cross-site scripting in versa-networks:versa director
- CVE-2021-39283 Denial of service in live555:live555
- CVE-2021-39282 Denial of service in live555:live555
- CVE-2021-39280 Command injection in korenix:jetwave 2212g firmware
- CVE-2021-3928 Use of Uninitialized Variable in vim/vim
- CVE-2021-39279 Command injection in moxa:oncell g3470a-lte-eu-t firmware
- CVE-2021-39278 Cross-site scripting in moxa:oncell g3470a-lte-eu-t firmware
- CVE-2021-39275 ap_escape_quotes buffer overflow
- CVE-2021-39274 Misconfiguration in xerosecurity:sn1per
- CVE-2021-39273 Misconfiguration in xerosecurity:sn1per
- CVE-2021-39272 Weak cryptography in fedoraproject:fedora
- CVE-2021-39271 Code injection in bscw:bscw classic
- CVE-2021-39270 Auth bypass in RSA SecurID Integration Kit
- CVE-2021-3927 Heap-based Buffer Overflow in vim/vim
- CVE-2021-39268 Cross-site scripting in salesagility:suitecrm
- CVE-2021-39267 Cross-site scripting in salesagility:suitecrm