Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 122 of 273.
- CVE-2021-37345 Privilege escalation in nagios:nagios xi
- CVE-2021-37344 Command injection in nagios:nagios xi switch wizard
- CVE-2021-37343 Path traversal in nagios:nagios xi
- CVE-2021-3734 Improper Restriction of Rendered UI Layers or Frames in yourls/yourls
- CVE-2021-37334 File upload in umbraco:forms
- CVE-2021-37333 Auth bypass in bookingcore:booking core
- CVE-2021-37331 Missing authorization in bookingcore:booking core
- CVE-2021-37330 Cross-site scripting in bookingcore:booking core
- CVE-2021-3733 Denial of service in python
- CVE-2021-37326 Information disclosure in netsarang:xshell
- CVE-2021-37322 Use after free in gnu:binutils
- CVE-2021-3732 Information disclosure in kernel
- CVE-2021-37317 Path traversal in asus:rt-ac68u firmware
- CVE-2021-37316 SQL injection in asus:rt-ac68u firmware
- CVE-2021-37315 Path traversal in asus:rt-ac68u firmware
- CVE-2021-37311 Memory corruption in fcitx 5 project:fcitx 5
- CVE-2021-3731 Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb
- CVE-2021-37306 Insecure Permissions issue in jeecg-boot
- CVE-2021-37305 Insecure Permissions issue in jeecg-boot
- CVE-2021-37304 Insecure Permissions issue in jeecg-boot
- CVE-2021-3730 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
- CVE-2021-37293 Path traversal in kevinlab:4st l-bems
- CVE-2021-37292 Hardcoded credentials in kevinlab:4st l-bems
- CVE-2021-37291 SQL injection in kevinlab:4st l-bems
- CVE-2021-3729 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
- CVE-2021-37289 Command injection in planex:mzk-dp150n firmware
- CVE-2021-3728 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
- CVE-2021-37274 Privilege escalation in kingdee:kis cloud
- CVE-2021-37273 Denial of service in chinatelecom:epon tianyi gateway zxhn f450 firmware
- CVE-2021-37271 Cross-site scripting in baidu:ueditor
- CVE-2021-37270 Missing authorization in s-cms:cms enterprise website construction system
- CVE-2021-3727 OS Command Injection in ohmyzsh/ohmyzsh
- CVE-2021-37267 Cross-site scripting in kindsoft:kindeditor
- CVE-2021-37262 Denial of service in jflyfox:jfinal cms
- CVE-2021-3726 OS Command Injection in ohmyzsh/ohmyzsh
- CVE-2021-37254 Information disclosure in m-files:m-files web
- CVE-2021-37253 Denial of service in m-files:m-files web
- CVE-2021-3725 OS Command Injection in ohmyzsh/ohmyzsh
- CVE-2021-37234 Missing authorization in modern honey network project:modern honey network
- CVE-2021-37232 Memory corruption in atomicparsley project:atomicparsley
- CVE-2021-37231 Memory corruption in atomicparsley project:atomicparsley
- CVE-2021-3723 Command injection in IBM System x 3550 M3
- CVE-2021-37223 Server-side request forgery in nagios:nagios xi
- CVE-2021-37222 Memory corruption in rcdcap project:rcdcap
- CVE-2021-37221 File upload in customer relationship management system project:customer relationship management system
- CVE-2021-37220 Memory corruption in artifex:mupdf
- CVE-2021-3722 Misconfiguration in PCManager
- CVE-2021-37219 HashiCorp Consul Privilege Escalation Vulnerability
- CVE-2021-37218 Privilege escalation in Hashicorp Nomad
- CVE-2021-37216 QSAN Storage Manager - Reflected Cross-Site Scripting
- CVE-2021-37215 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-4
- CVE-2021-37214 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-3
- CVE-2021-37213 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-2
- CVE-2021-37212 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-1
- CVE-2021-37211 Larvata Digital Technology Co. Ltd. FLYGO - Stored XSS
- CVE-2021-3721 Memory corruption in PCManager
- CVE-2021-37209 Weak cryptography in RUGGEDCOM M2100
- CVE-2021-37208 Cross-site scripting in RUGGEDCOM M2100
- CVE-2021-37207 Misconfiguration in SENTRON powermanager V3
- CVE-2021-37206 Denial of service in SIPROTEC 5 relays with CPU variants CP050
- CVE-2021-37205 Denial of service in SIMATIC Drive Controller family
- CVE-2021-37204 Denial of service in SIMATIC Drive Controller family
- CVE-2021-37203 Memory corruption in NX 1980 Series
- CVE-2021-37202 Use after free in NX 1980 Series
- CVE-2021-37201 Cross-site request forgery in SINEC NMS
- CVE-2021-37200 Path traversal in SINEC NMS
- CVE-2021-3720 Information disclosure in Legion Phone Pro (L79031)
- CVE-2021-37199 Memory corruption in SINUMERIK 808D
- CVE-2021-37198 Cross-site request forgery in COMOS V10.2
- CVE-2021-37197 SQL injection in COMOS V10.2
- CVE-2021-37196 Path traversal in COMOS V10.2
- CVE-2021-37195 Cross-site scripting in COMOS V10.2
- CVE-2021-37194 File upload in COMOS V10.2
- CVE-2021-37193 Business logic in SINEMA Remote Connect Server
- CVE-2021-37192 Information disclosure in SINEMA Remote Connect Server
- CVE-2021-37191 Information disclosure in SINEMA Remote Connect Server
- CVE-2021-37190 Information disclosure in SINEMA Remote Connect Server
- CVE-2021-3719 Code injection in ThinkCentre and ThinkStation BIOS
- CVE-2021-37189 Information disclosure in digi:transport wr11 firmware
- CVE-2021-37188 Security feature bypass in digi:transport dr64 firmware
- CVE-2021-37187 Information disclosure in digi:transport dr64 firmware
- CVE-2021-37186 Weak cryptography in LOGO! CMR2020
- CVE-2021-37185 Denial of service in SIMATIC Drive Controller family
- CVE-2021-37184 Auth bypass in Industrial Edge Management
- CVE-2021-37183 Denial of service in SINEMA Remote Connect Server
- CVE-2021-37182 Denial of service in SCALANCE XM408-4C
- CVE-2021-37181 Deserialization in Cerberus DMS V4.0
- CVE-2021-37180 Memory corruption in Solid Edge SE2021
- CVE-2021-3718 Denial of service in ThinkPad BIOS
- CVE-2021-37179 Use after free in Solid Edge SE2021
- CVE-2021-37178 XML external entity in Solid Edge SE2021
- CVE-2021-37177 Other in SINEMA Remote Connect Server
- CVE-2021-37176 Memory corruption in Simcenter Femap V2020.2
- CVE-2021-37175 Information disclosure in RUGGEDCOM ROX MX5000
- CVE-2021-37174 Privilege escalation in RUGGEDCOM ROX MX5000
- CVE-2021-37173 Privilege escalation in RUGGEDCOM ROX MX5000
- CVE-2021-37172 Auth bypass in SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
- CVE-2021-3717 Wildfly-Core user account mismanagement
- CVE-2021-37167 Privilege escalation in swisslog-healthcare:hmi-3 control panel firmware
- CVE-2021-37166 Memory corruption in swisslog-healthcare:hmi-3 control panel firmware