Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 108 of 273.
- CVE-2021-3917 coreos-installer < 0.10.0 writes world-readable Ignition config to installed system
- CVE-2021-39169 XSS vulnerability using dialog
- CVE-2021-39168 TimelockController vulnerability in OpenZeppelin Contracts
- CVE-2021-39167 TimelockController vulnerability in OpenZeppelin Contracts
- CVE-2021-39166 Improper Neutralization of Text-Values in Object Version Preview
- CVE-2021-39165 Unauthenticated SQL Injection
- CVE-2021-39164 Improper authorisation of /members discloses room membership to non-members
- CVE-2021-39163 Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
- CVE-2021-39162 Incorrect handling of H2 GOAWAY + SETTINGS frames
- CVE-2021-39161 Cross-site scripting via category name in Discourse
- CVE-2021-39160 Code injection in nbgitpuller
- CVE-2021-3916 Path Traversal in bookstackapp/bookstack
- CVE-2021-39159 Remote code execution in Binderhub
- CVE-2021-39158 Dependency injection in NVCaffe
- CVE-2021-39157 Improper Handling of Exceptional Conditions in detect-character-encoding
- CVE-2021-39156 Fragments in Path May Lead to Authorization Policy Bypass
- CVE-2021-39155 Authorization Policy Bypass Due to Case Insensitive Host Comparison
- CVE-2021-39154 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39153 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39152 A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
- CVE-2021-39151 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39150 A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
- CVE-2021-3915 Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
- CVE-2021-39149 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39148 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39147 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39146 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39145 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39144 XStream Remote Code Execution
- CVE-2021-39143 Path Traversal in spinnaker
- CVE-2021-39141 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39140 XStream can cause a Denial of Service
- CVE-2021-3914 SmallRye Health UI Cross-site Scripting vulnerability
- CVE-2021-39139 XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39138 New anonymous user session acts as if it's created with password
- CVE-2021-39137 Consensus flaw during block processing in go-ethereum
- CVE-2021-39136 Cross-site scripting vulnerability in file upload
- CVE-2021-39135 UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
- CVE-2021-39134 UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
- CVE-2021-39133 Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server
- CVE-2021-39132 YAML deserialization can run untrusted code
- CVE-2021-39131 Improper Handling of Unexpected Data Type in ced
- CVE-2021-39128 Code injection in Jira Data Center
- CVE-2021-39127 Missing authorization in Jira Data Center
- CVE-2021-39126 Cross-site request forgery in Jira Data Center
- CVE-2021-39125 Information disclosure in Jira Data Center
- CVE-2021-39124 Cross-site request forgery in Jira Data Center
- CVE-2021-39123 Denial of service in Jira Data Center
- CVE-2021-39122 Information disclosure in Jira Data Center
- CVE-2021-39121 Information disclosure in Jira Data Center
- CVE-2021-3912 OctoRPKI crashes when processing GZIP bomb returned via malicious repository
- CVE-2021-39119 Missing authorization in Jira Data Center
- CVE-2021-39118 Information disclosure in Jira Data Center
- CVE-2021-39117 Cross-site scripting in Jira Data Center
- CVE-2021-39116 Denial of service in Jira Data Center
- CVE-2021-39115 Code injection in Jira Service Desk Data Center
- CVE-2021-39114 Code injection in Confluence Data Center
- CVE-2021-39113 Missing authorization in Jira Data Center
- CVE-2021-39112 Open redirect in Jira Data Center
- CVE-2021-39111 Cross-site scripting in Jira Data Center
- CVE-2021-3911 Misconfigured IP address field in ROA leads to OctoRPKI crash
- CVE-2021-39109 Path traversal in atlasboard
- CVE-2021-3910 NUL character in ROA causes OctoRPKI to crash
- CVE-2021-39090 IBM Cloud Pak for Security information disclosure
- CVE-2021-3909 Infinite open connection causes OctoRPKI to hang forever
- CVE-2021-39089 IBM Cloud Pak for Security information disclosure
- CVE-2021-39088 Privilege escalation in QRadar SIEM
- CVE-2021-39087 Information disclosure in Sterling B2B Integrator
- CVE-2021-39086 Information disclosure in Sterling File Gateway
- CVE-2021-39085 SQL injection in Sterling B2B Integrator
- CVE-2021-39082 Weak cryptography in UrbanCode Deploy
- CVE-2021-39081 IBM Cognos Analytics Mobile information disclosure
- CVE-2021-39080 Information disclosure in Cognos Analytics Mobile
- CVE-2021-3908 Infinite certificate chain depth results in OctoRPKI running forever
- CVE-2021-39079 Cross-site scripting in Cognos Analytics Mobile
- CVE-2021-39078 Information disclosure in Security Guardium
- CVE-2021-39077 IBM Security Guardium information disclosure
- CVE-2021-39076 Weak cryptography in Security Guardium
- CVE-2021-39074 Cross-site scripting in Security Guardium
- CVE-2021-39072 Misconfiguration in Security Guardium
- CVE-2021-39070 Auth bypass in ibm:security verify access
- CVE-2021-3907 Arbitrary filepath traversal via URI injection
- CVE-2021-39068 Cross-site scripting in Curam Social Program Management
- CVE-2021-39066 Auth bypass in ibm:financial transaction manager
- CVE-2021-39065 Command injection in Spectrum Copy Data Management
- CVE-2021-39064 Auth bypass in Spectrum Copy Data Management
- CVE-2021-39063 Misconfiguration in Spectrum Protect Plus
- CVE-2021-3906 Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack
- CVE-2021-39059 Cross-site scripting in Jazz Team Server
- CVE-2021-39058 Weak cryptography in Spectrum Copy Data Management
- CVE-2021-39057 Server-side request forgery in Spectrum Protect Plus
- CVE-2021-39056 Denial of service in i
- CVE-2021-39055 Cross-site scripting in Spectrum Copy Data Management
- CVE-2021-39054 Other in Spectrum Copy Data Management
- CVE-2021-39053 Information disclosure in Spectrum Copy Data Management
- CVE-2021-39052 Missing authorization in Spectrum Copy Data Management
- CVE-2021-39051 Server-side request forgery in Spectrum Copy Data Management
- CVE-2021-39050 Memory corruption in i2 Analyst's Notebook
- CVE-2021-3905 Denial of service in openvswitch (ovs)
- CVE-2021-39049 Memory corruption in i2 Analyst's Notebook