Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 112 of 273.
- CVE-2021-38606 Weak cryptography in yogeshojha:rengine
- CVE-2021-38604 Null dereference in fedoraproject:fedora
- CVE-2021-38603 Cross-site scripting in pluxml:pluxml
- CVE-2021-38602 Cross-site scripting in pluxml:pluxml
- CVE-2021-3860 SQL injection in JFrog Artifactory
- CVE-2021-38599 Improper use of cryptographic key in wal-g
- CVE-2021-38598 OpenStack Neutron vulnerable to hardware address impersonation
- CVE-2021-38597 Security feature bypass in wolfssl:wolfssl
- CVE-2021-38593 Memory corruption in fedoraproject:fedora
- CVE-2021-38592 Memory corruption in wasm3 project:wasm3
- CVE-2021-38591 Misconfiguration in google:android
- CVE-2021-38590 Misconfiguration in cpanel:cpanel
- CVE-2021-3859 Undertow vulnerable to Denial of Service (DoS) attacks
- CVE-2021-38589 Other in cpanel:cpanel
- CVE-2021-38588 Supply chain in cpanel:cpanel
- CVE-2021-38587 Race condition in cpanel:cpanel
- CVE-2021-38586 Other in cpanel:cpanel
- CVE-2021-38585 Deserialization in cpanel:cpanel
- CVE-2021-38584 XML external entity in cpanel:cpanel
- CVE-2021-38583 Cross-site scripting in openbaraza:openbaraza human capital management
- CVE-2021-3858 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
- CVE-2021-38578 Integer overflow in EDK II
- CVE-2021-38576 Misconfiguration in EDK II
- CVE-2021-38575 Memory corruption in EDK II
- CVE-2021-38574 SQL injection in foxitsoftware:foxit reader
- CVE-2021-38573 Path traversal in foxitsoftware:foxit reader
- CVE-2021-38572 Path traversal in foxitsoftware:foxit reader
- CVE-2021-38571 Other in foxitsoftware:foxit reader
- CVE-2021-38570 Other in foxitsoftware:foxit reader
- CVE-2021-3857 Cross-site Scripting (XSS) - Stored in chaskiq/chaskiq
- CVE-2021-38569 Denial of service in foxitsoftware:foxit reader
- CVE-2021-38568 Memory corruption in foxitsoftware:foxit reader
- CVE-2021-38567 Null dereference in foxit:pdf reader
- CVE-2021-38566 Denial of service in foxitsoftware:pdf editor
- CVE-2021-38565 Path traversal in foxitsoftware:pdf editor
- CVE-2021-38564 Memory corruption in foxitsoftware:pdf editor
- CVE-2021-38563 Memory corruption in foxit:pdf reader
- CVE-2021-38562 Information disclosure in bestpractical:request tracker
- CVE-2021-38561 golang.org/x/text/language Out-of-bounds Read vulnerability
- CVE-2021-38560 Cross-site scripting in ivanti:service manager
- CVE-2021-3856 Keycloak has Files or Directories Accessible to External Parties
- CVE-2021-38559 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2021-38557 raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
- CVE-2021-38556 Command Injection in RaspAP 2.6.6
- CVE-2021-38555 An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java
- CVE-2021-38554 Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault
- CVE-2021-38553 HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0
- CVE-2021-3855 Command Injection in Liman Central Management System
- CVE-2021-38549 Information disclosure in benda:miracase hmub500 firmware
- CVE-2021-38548 Information disclosure in jbl:go 2 firmware
- CVE-2021-38547 Information disclosure in logitech:s120 firmware
- CVE-2021-38546 Information disclosure in creative:pebble firmware
- CVE-2021-38545 Information disclosure in raspberrypi:raspberry pi 3 model b\+ firmware
- CVE-2021-38544 Information disclosure in sony:srs-xb33 firmware
- CVE-2021-38543 Information disclosure in tp-link:ue330 firmware
- CVE-2021-38542 Apache James vulnerable to STARTTLS command injection (IMAP and POP3)
- CVE-2021-38540 Apache Airflow: Variable Import endpoint missed authentication check
- CVE-2021-3854 SQLi in Glox Technology's Useroam Hotspot
- CVE-2021-38539 Privilege escalation in netgear:d8500 firmware
- CVE-2021-38538 Cross-site scripting in netgear:d7800 firmware
- CVE-2021-38537 Cross-site scripting in netgear:ac2100 firmware
- CVE-2021-38536 Cross-site scripting in netgear:ac2100 firmware
- CVE-2021-38535 Cross-site scripting in netgear:ac2100 firmware
- CVE-2021-38534 Cross-site scripting in netgear:d3600 firmware
- CVE-2021-38533 Cross-site scripting in netgear:rax40 firmware
- CVE-2021-38532 Misconfiguration in netgear:wac104 firmware
- CVE-2021-38531 Misconfiguration in netgear:ac2100 firmware
- CVE-2021-38530 Command injection in netgear:rbk20 firmware
- CVE-2021-3853 Cross-site Scripting (XSS) - Stored in chaskiq/chaskiq
- CVE-2021-38529 Command injection in netgear:d7800 firmware
- CVE-2021-38528 Command injection in netgear:d8500 firmware
- CVE-2021-38527 Command injection in netgear:cbr40 firmware
- CVE-2021-38526 Memory corruption in netgear:rax35 firmware
- CVE-2021-38525 Memory corruption in netgear:d3600 firmware
- CVE-2021-38524 Memory corruption in netgear:mk62 firmware
- CVE-2021-38523 Memory corruption in netgear:r6400 firmware
- CVE-2021-38522 Memory corruption in netgear:r6400 firmware
- CVE-2021-38521 Command injection in netgear:r6400 firmware
- CVE-2021-38520 Command injection in netgear:r6400 firmware
- CVE-2021-3852 Authorization Bypass Through User-Controlled Key in weseek/growi
- CVE-2021-38519 Command injection in netgear:r6250 firmware
- CVE-2021-38518 Command injection in netgear:rax200 firmware
- CVE-2021-38517 Memory corruption in netgear:r6400 firmware
- CVE-2021-38516 Missing authorization in netgear:ac2100 firmware
- CVE-2021-38515 Denial of service in netgear:r6400 firmware
- CVE-2021-38514 Auth bypass in netgear:d3600 firmware
- CVE-2021-38513 Auth bypass in netgear:cbr40 firmware
- CVE-2021-38512 HTTP Request Smuggling in actix-http
- CVE-2021-38511 Links in archive can create arbitrary directories
- CVE-2021-38510 Security feature bypass in Firefox
- CVE-2021-3851 Open Redirect in firefly-iii/firefly-iii
- CVE-2021-38509 Other in Firefox
- CVE-2021-38508 Security feature bypass in Firefox
- CVE-2021-38507 Security feature bypass in Firefox
- CVE-2021-38506 Security feature bypass in Firefox
- CVE-2021-38505 Information disclosure in Firefox
- CVE-2021-38504 Use after free in Firefox
- CVE-2021-38503 Security feature bypass in Firefox
- CVE-2021-38502 Security feature bypass in Thunderbird
- CVE-2021-38501 Memory corruption in Firefox