Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 115 of 273.
- CVE-2021-38311 Denial of service in contiki-os:contiki
- CVE-2021-3831 Cross-site Scripting (XSS) - Reflected in gnuboard/gnuboard5
- CVE-2021-38306 Command injection in lg:n1t1 firmware
- CVE-2021-38305 Command injection in Yamale
- CVE-2021-38304 Privilege escalation in ni:ni-pal
- CVE-2021-38303 SQL injection in surelinesystems:sureedge migrator
- CVE-2021-38302 SQL injection in TYPO3 extension
- CVE-2021-38300 Memory corruption in debian:debian linux
- CVE-2021-3830 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
- CVE-2021-38299 Improper Access Control in Webauthn Framework
- CVE-2021-38298 XML external entity in zohocorp:manageengine admanager plus
- CVE-2021-38297 Memory corruption in fedoraproject:fedora
- CVE-2021-38296 Apache Spark Key Negotiation Vulnerability
- CVE-2021-38295 Privilege escalation vulnerability when using HTML attachments
- CVE-2021-38294 Shell Command Injection Vulnerability in Nimbus Thrift Server
- CVE-2021-38291 Denial of service in debian:debian linux
- CVE-2021-38290 Other in thedaylightstudio:fuel cms
- CVE-2021-3829 Open Redirect in openwhyd/openwhyd
- CVE-2021-38289 Privilege escalation in novastar:novaicare
- CVE-2021-38283 Information disclosure in wipro:holmes
- CVE-2021-3828 Inefficient Regular Expression Complexity in nltk/nltk
- CVE-2021-38278 Memory corruption in tendacn:ac10 firmware
- CVE-2021-3827 ECP SAML binding bypasses authentication flows
- CVE-2021-38269 Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module
- CVE-2021-38268 Liferay Portal and Liferay DXP has incorrect default permissions for site members
- CVE-2021-38267 Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page
- CVE-2021-38266 Liferay Portal and Liferay DXP fails to properly import users from LDAP
- CVE-2021-38265 Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)
- CVE-2021-38264 Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter
- CVE-2021-38263 Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console
- CVE-2021-38260 Memory corruption in nxp:mcuxpresso software development kit
- CVE-2021-3826 Memory corruption in gcc
- CVE-2021-38258 Memory corruption in nxp:mcuxpresso software development kit
- CVE-2021-3825 Missing Authorization Checks in LiderAhenk
- CVE-2021-38244 Denial of service in cbioportal project:cbioportal
- CVE-2021-38243 Code injection in xunruicms:xunruicms
- CVE-2021-38241 Deserialization in ruoyi:ruoyi
- CVE-2021-3824 Cross-site scripting in OpenVPN Access Server
- CVE-2021-38239 SQL injection in dataease:dataease
- CVE-2021-3823 Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode
- CVE-2021-38221 Cross-site scripting in bbs-go project:bbs-go
- CVE-2021-3822 Inefficient Regular Expression Complexity in josdejong/jsoneditor
- CVE-2021-38217 SQL injection in sem-cms:semcms
- CVE-2021-3821 Denial of service in HP FutureSmart
- CVE-2021-38209 Information disclosure in linux:linux kernel
- CVE-2021-38208 Null dereference in linux:linux kernel
- CVE-2021-38207 Memory corruption in linux:linux kernel
- CVE-2021-38206 Null dereference in linux:linux kernel
- CVE-2021-38205 Information disclosure in debian:debian linux
- CVE-2021-38204 Use after free in debian:debian linux
- CVE-2021-38203 Denial of service in linux:linux kernel
- CVE-2021-38202 Memory corruption in linux:linux kernel
- CVE-2021-38201 Memory corruption in linux:linux kernel
- CVE-2021-38200 Null dereference in linux:linux kernel
- CVE-2021-3820 Inefficient Regular Expression Complexity in pksunkara/inflect
- CVE-2021-38199 Denial of service in debian:debian linux
- CVE-2021-38198 Security feature bypass in debian:debian linux
- CVE-2021-38197 Tarslip in go-unarr
- CVE-2021-38196 Remote code execution in better-macro
- CVE-2021-38195 Overflow in libsecp256k1
- CVE-2021-38194 Calculation error in ark-r1cs-std
- CVE-2021-38193 Cross-site Scripting in ammonia
- CVE-2021-38192 Overflow in prost-types
- CVE-2021-38191 Race condition in tokio
- CVE-2021-38190 Out of bounds write in nalgebra
- CVE-2021-3819 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
- CVE-2021-38189 SMTP command injection in lettre
- CVE-2021-38188 Incorrect buffer size calculation in iced-x86
- CVE-2021-38187 Incorrect cast in anymap
- CVE-2021-38186 Cross-site Scripting in comrak
- CVE-2021-38185 Integer overflow in gnu:cpio
- CVE-2021-38183 Cross-site scripting in SAP NetWeaver
- CVE-2021-38182 Privilege escalation in Kyma
- CVE-2021-38181 Denial of service in SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2021-38180 Code injection in SAP Business One
- CVE-2021-3818 Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
- CVE-2021-38179 Information disclosure in SAP Business One
- CVE-2021-38178 Security feature bypass in SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2021-38177 Null dereference in SAP CommonCryptoLib
- CVE-2021-38176 SQL injection in SAP LT Replication Server
- CVE-2021-38175 Information disclosure in SAP Analysis for Microsoft Office
- CVE-2021-38174 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2021-38173 Command injection in debian:debian linux
- CVE-2021-38172 Memory corruption in debian:perm
- CVE-2021-38171 Other in debian:debian linux
- CVE-2021-3817 SQL Injection in wbce/wbce_cms
- CVE-2021-38169 Command injection in roxy-wi:roxy-wi
- CVE-2021-38168 SQL injection in roxy-wi:roxy-wi
- CVE-2021-38167 SQL injection in roxy-wi:roxy-wi
- CVE-2021-38166 Integer overflow in debian:debian linux
- CVE-2021-38165 Information disclosure in debian:debian linux
- CVE-2021-38164 Missing authorization in SAP ERP Financial Accounting (RFOPENPOSTING FR)
- CVE-2021-38163 SAP NetWeaver Unrestricted File Upload
- CVE-2021-38162 Other in SAP Web Dispatcher
- CVE-2021-38161 Not validating origin TLS certificate
- CVE-2021-38160 Memory corruption in debian:debian linux
- CVE-2021-3816 Cross-site scripting in Cacti
- CVE-2021-38159 SQL injection in progress:moveit transfer
- CVE-2021-38157 Cross-site scripting in leostream:connection broker
- CVE-2021-38156 Cross-site scripting in nagios:nagios xi