Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 118 of 273.
- CVE-2021-37863 Denial of service in Mattermost
- CVE-2021-37862 Business logic in Mattermost
- CVE-2021-37861 Information disclosure in Mattermost
- CVE-2021-37860 Cross-site Scripting in Mattermost
- CVE-2021-3786 Information disclosure in Notebook and ThinkPad BIOS
- CVE-2021-37859 Reflected XSS in OAuth Flow
- CVE-2021-37852 LPE in ESET products for Windows
- CVE-2021-37851 Local Privilege Escalation in ESET product for Windows
- CVE-2021-37850 Denial of service in ESET for Mac products
- CVE-2021-3785 Cross-site Scripting (XSS) - Stored in yourls/yourls
- CVE-2021-37848 Information disclosure in pengutronix:barebox
- CVE-2021-37847 Weak cryptography in pengutronix:barebox
- CVE-2021-37845 Security feature bypass in citadel:webcit
- CVE-2021-37843 Auth bypass in atlassian:saml single sign on
- CVE-2021-37842 Information disclosure in couchbase:couchbase server
- CVE-2021-37841 Misconfiguration in docker:desktop
- CVE-2021-37840 Cross-site request forgery in aapanel:aapanel
- CVE-2021-3784 Garuda Linux Improper Authorization
- CVE-2021-37839 Improper access to dataset metadata information
- CVE-2021-37833 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2021-37832 SQL injection in digitaldruid:hoteldruid
- CVE-2021-3783 Cross-site Scripting (XSS) - Reflected in yourls/yourls
- CVE-2021-37823 OpenCart SQL injection vulnerability
- CVE-2021-3782 Integer overflow in wayland
- CVE-2021-37819 Denial of service in pdftk-java project:pdftk-java
- CVE-2021-3781 Command injection in ghostscript
- CVE-2021-37808 SQL injection in phpgurukul:news portal
- CVE-2021-37807 SQL injection in phpgurukul:online shopping portal
- CVE-2021-37806 SQL injection in phpgurukul:vehicle parking management system
- CVE-2021-37805 Cross-site scripting in phpgurukul:vehicle parking management system
- CVE-2021-37803 SQL injection in online covid vaccination scheduler system project:online covid vaccination scheduler system
- CVE-2021-3780 Cross-site Scripting (XSS) - Stored in chocobozzz/peertube
- CVE-2021-37794 Cross-site scripting in filebrowser project:filebrowser
- CVE-2021-37791 Missing authorization in myadmin project:myadmin
- CVE-2021-3779 Ruby-MySQL Gem Client File Read
- CVE-2021-37789 Memory corruption in debian:debian linux
- CVE-2021-37788 Other in gurock:testrail
- CVE-2021-37787 SQL injection in abocms:abo.cms
- CVE-2021-37786 Denial of service in bag:covid certificate
- CVE-2021-37782 SQL injection in phpgurukul:employee record management system
- CVE-2021-37781 Cross-site scripting in phpgurukul:employee record management system
- CVE-2021-3778 Heap-based Buffer Overflow in vim/vim
- CVE-2021-37778 Memory corruption in gps-sdr-sim project:gps-sdr-sim
- CVE-2021-37777 Missing authorization in gilacms:gila cms
- CVE-2021-37774 Code injection in tp-link:tl-wdr7660 firmware
- CVE-2021-37770 File upload in nucleuscms:nucleus cms
- CVE-2021-3777 Inefficient Regular Expression Complexity in daaku/nodejs-tmpl
- CVE-2021-37764 Missing authorization in xos-shop:xos shop system
- CVE-2021-37762 File upload in zohocorp:manageengine admanager plus
- CVE-2021-37761 File upload in zohocorp:manageengine admanager plus
- CVE-2021-37760 Information disclosure in graylog:graylog
- CVE-2021-3776 Cross-Site Request Forgery (CSRF) in star7th/showdoc
- CVE-2021-37759 Information disclosure in graylog:graylog
- CVE-2021-37750 Null dereference in debian:debian linux
- CVE-2021-3775 Cross-Site Request Forgery (CSRF) in star7th/showdoc
- CVE-2021-37749 SQL injection in hexagongeospatial:geomedia webmap
- CVE-2021-37748 Memory corruption in grandstream:ht801 firmware
- CVE-2021-37746 Open redirect in claws-mail:claws-mail
- CVE-2021-37743 Cross-site scripting in misp-project:misp
- CVE-2021-37742 Cross-site scripting in misp-project:misp
- CVE-2021-37741 File upload in zohocorp:manageengine admanager plus
- CVE-2021-37740 Denial of service in mdt:scn-ip000.03 firmware
- CVE-2021-3774 Meross MSS550X Missing Encryption of Sensitive Data
- CVE-2021-37739 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-37738 Missing authorization in Aruba ClearPass Policy Manager
- CVE-2021-37737 SQL injection in Aruba ClearPass Policy Manager
- CVE-2021-37736 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2021-37735 Denial of service in HPE Aruba Instant (IAP)
- CVE-2021-37734 Path traversal in HPE Aruba Instant (IAP)
- CVE-2021-37733 Path traversal in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37732 Command injection in HPE Aruba Instant (IAP)
- CVE-2021-37731 Path traversal in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37730 Command injection in HPE Aruba Instant (IAP)
- CVE-2021-3773 Information disclosure in kernel
- CVE-2021-37729 Path traversal in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37728 Path traversal in Aruba Operating System Software
- CVE-2021-37727 Command injection in HPE Aruba Instant (IAP)
- CVE-2021-37726 Memory corruption in HPE Aruba Instant (IAP)
- CVE-2021-37725 Cross-site request forgery in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37724 Command injection in Aruba Operating System Software
- CVE-2021-37723 Command injection in Aruba Operating System Software
- CVE-2021-37722 Command injection in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37721 Command injection in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37720 Command injection in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-3772 Denial of service in kernel
- CVE-2021-37719 Command injection in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37718 Command injection in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37717 Command injection in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37716 Memory corruption in Aruba SD-WAN Software and Gateways; Aruba Operating System Software
- CVE-2021-37715 Cross-site scripting in Aruba AirWave Management Platform
- CVE-2021-37714 Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
- CVE-2021-37713 Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
- CVE-2021-37712 Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
- CVE-2021-37711 Authenticated server-side request forgery in file upload via URL.
- CVE-2021-37710 Cross-Site Scripting via SVG media files
- CVE-2021-37709 Insecure direct object reference of log files of the Import/Export feature
- CVE-2021-37708 Command injection in mail agent settings
- CVE-2021-37707 Manipulation of product reviews via API
- CVE-2021-37706 Potential integer underflow upon receiving STUN message in PJSIP
- CVE-2021-37705 Improper Authorization and Origin Validation Error in OneFuzz