Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 107 of 273.
- CVE-2021-39263 Memory corruption in debian:debian linux
- CVE-2021-39262 Memory corruption in debian:debian linux
- CVE-2021-39261 Memory corruption in debian:debian linux
- CVE-2021-39260 Memory corruption in debian:debian linux
- CVE-2021-39259 Memory corruption in debian:debian linux
- CVE-2021-39258 Memory corruption in debian:debian linux
- CVE-2021-39257 Denial of service in debian:debian linux
- CVE-2021-39256 Memory corruption in debian:debian linux
- CVE-2021-39255 Memory corruption in debian:debian linux
- CVE-2021-39254 Integer overflow in debian:debian linux
- CVE-2021-39253 Memory corruption in debian:debian linux
- CVE-2021-39252 Memory corruption in debian:debian linux
- CVE-2021-39251 Null dereference in debian:debian linux
- CVE-2021-39250 Cross-site scripting in invisioncommunity:invision power board
- CVE-2021-39249 Cross-site scripting in invisioncommunity:invision power board
- CVE-2021-39248 Cross-site scripting in edx:edx-platform
- CVE-2021-39247 Memory corruption in zint:barcode generator
- CVE-2021-39246 Information disclosure in torproject:tor browser
- CVE-2021-39245 Hardcoded credentials in altus:hadron xtorm hx3040 firmware
- CVE-2021-39244 Command injection in altus:hadron xtorm hx3040 firmware
- CVE-2021-39243 Cross-site request forgery in altus:hadron xtorm hx3040 firmware
- CVE-2021-39242 Other in debian:debian linux
- CVE-2021-39241 Security feature bypass in debian:debian linux
- CVE-2021-39240 Security feature bypass in debian:debian linux
- CVE-2021-3924 Path Traversal in getgrav/grav
- CVE-2021-39239 XML External Entity (XXE) vulnerability
- CVE-2021-39238 Memory corruption in HP Enterprise LaserJet; HP LaserJet Managed; HP Enterprise PageWide; HP PageWide Managed printers
- CVE-2021-39237 Information disclosure in HP LaserJet; HP LaserJet Managed; HP PageWide; HP PageWide Managed printers
- CVE-2021-39236 Owners of the S3 tokens are not validated
- CVE-2021-39235 Access mode of block tokens are not enforced
- CVE-2021-39234 Raw block data can be read bypassing ACL/authorization
- CVE-2021-39233 Container-related datanode operations can be called without authorization
- CVE-2021-39232 Missing admin check for SCM related admin commands
- CVE-2021-39231 Missing authentication/authorization on internal RPC endpoints
- CVE-2021-39230 Error in JPNS kernel of Butter
- CVE-2021-3923 Information disclosure in kernel
- CVE-2021-39229 Regular expression deinal of service in apprise
- CVE-2021-39228 Memory Safety Issue when using patch or merge on state and assign the result back to state
- CVE-2021-39227 Fix prototype pollution in the zrender merge and clone helper methods
- CVE-2021-39226 Grafana Authentication Bypass
- CVE-2021-39225 Missing permission check on Deck API
- CVE-2021-39224 File path disclosure of shared files in OfficeOnline application
- CVE-2021-39223 File path disclosure of shared files in Richdocuments application
- CVE-2021-39222 XSS in Talk
- CVE-2021-39221 XSS in Contacts
- CVE-2021-39220 Bypass of image blocking in Nextcloud Mail
- CVE-2021-3922 Race condition in IMController
- CVE-2021-39219 Wrong type for `Linker`-define functions when used across two `Engine`s
- CVE-2021-39218 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
- CVE-2021-39217 OpenMage LTS arbitrary command execution in custom layout update through blocks
- CVE-2021-39216 Use after free passing `externref`s to Wasm in Wasmtime
- CVE-2021-39215 Authentication Bypass: Forged Tokens Allow Access to Arbitrary Rooms
- CVE-2021-39214 Lacking Protection against HTTP Request Smuggling in mitmproxy
- CVE-2021-39213 IP restriction on GLPI API Bypass with custom header injection
- CVE-2021-39212 Issue when Configuring the ImageMagick Security Policy
- CVE-2021-39211 Disclosure of GLPI and server information in telemetry endpoint
- CVE-2021-39210 Autologin cookie accessible by scripts
- CVE-2021-3921 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
- CVE-2021-39209 Bypassable CSRF protection
- CVE-2021-39208 WriteEntryToDirectory used for an archive extraction is vulnerable to partial path traversal.
- CVE-2021-39207 Deserialization of Untrusted Data in parlai
- CVE-2021-39206 Incorrect Authorization with specially crafted requests
- CVE-2021-39205 DOM-based XSS/Content Spoofing via Prototype Pollution
- CVE-2021-39204 Excessive CPU usage in Pomerium
- CVE-2021-39203 Private data disclosure/privilege escalation through the block editor in Wordpress
- CVE-2021-39202 WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget
- CVE-2021-39201 Authenticated cross-site scripting (XSS) in WordPress editor
- CVE-2021-39200 Information Disclosure in wp_die() via JSONP in wordpress
- CVE-2021-3920 Cross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin
- CVE-2021-39199 Cross site scripting via unsafe defaults in remark-html
- CVE-2021-39198 The disqualify lead action may be executed without CSRF token check
- CVE-2021-39197 Cross-Site Request Forgery in better_errors
- CVE-2021-39196 Authenticated non-privileged user can request unfiltered data without adequate permissions in pcapture
- CVE-2021-39195 Server-Side Request Forgery vulnerability in misskey
- CVE-2021-39194 Denial of service while parsing polymorphic input with tagged polymorphism style in kaml
- CVE-2021-39193 Transaction validity oversight in pallet-ethereum
- CVE-2021-39192 Privilege escalation: all users can access Admin-level API keys
- CVE-2021-39191 URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc
- CVE-2021-39190 SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2021-3919 Privilege escalation in OMEN Gaming Hub and HP Command Center
- CVE-2021-39189 Observable Response Discrepancy in Lost Password Service
- CVE-2021-39187 Crash server with query parameter
- CVE-2021-39186 Improper Input Validation in GlobalNewFiles
- CVE-2021-39185 Default CORS config allows any origin with credentials
- CVE-2021-39184 Sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
- CVE-2021-39183 Unsafe inline XSS Owncast
- CVE-2021-39182 Improper hashing in enrocrypt
- CVE-2021-39181 Unsafe Deserialization of User Data Using XStream
- CVE-2021-39180 Path Traversal in Archive Handling Leading to Code Execution
- CVE-2021-3918 Prototype Pollution in kriszyp/json-schema
- CVE-2021-39179 SQL Injection in DHIS2 Tracker API
- CVE-2021-39178 XSS in Image Optimization API for Next.js versions between 10.0.0 and 11.1.0
- CVE-2021-39177 User impersonation due to incorrect handling of the login JWT
- CVE-2021-39176 Missing Release of Memory after Effective Lifetime in detect-character-encoding
- CVE-2021-39175 XSS vector in slide mode speaker-view
- CVE-2021-39174 Configuration leak
- CVE-2021-39173 Forced reinstall
- CVE-2021-39172 New line injection during configuration edition
- CVE-2021-39171 Unlimited transforms allowed for signed nodes
- CVE-2021-39170 Improper Encoding or Escaping of Output in Asset Metadata Component