Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 127 of 273.
- CVE-2021-36741 Trend Micro Multiple Products Improper Input Validation
- CVE-2021-36740 Other in debian:debian linux
- CVE-2021-3674 Memory corruption in rizin
- CVE-2021-36739 XSS vulnerability in the MVCBean JSP portlet maven archetype
- CVE-2021-36738 XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet
- CVE-2021-36737 XSS in V3 Demo Portlet
- CVE-2021-3673 Denial of service in radare2
- CVE-2021-36724 ForeScout - SecureConnector Local Service DoS
- CVE-2021-36723 Emuse - eServices / eNvoice Exposure Of Private Personal Information
- CVE-2021-36722 Emuse - eServices / eNvoice SQL injection
- CVE-2021-36721 Sysaid - Sysaid API User Enumeration
- CVE-2021-36720 Cybonet - PineApp
- CVE-2021-3672 Other in c-ares
- CVE-2021-36719 Cybonet - PineApp
- CVE-2021-36718 Hardcoded credentials in Synel eharmonynew, Synel Reports
- CVE-2021-36717 Synerion TimeNet version 9.21 - Directory Traversal
- CVE-2021-36716 Improper Input Validation in is-email
- CVE-2021-36713 Cross-site scripting in sprymedia:datatables
- CVE-2021-36712 Cross-site scripting in yzmcms:yzmcms
- CVE-2021-36711 Octobot mishandles Tentacles upload
- CVE-2021-36710 Privilege escalation in toaruos:toaruos
- CVE-2021-3671 Null dereference in Samba
- CVE-2021-36708 Auth bypass in prolink:prc2402m firmware
- CVE-2021-36707 Command injection in prolink:prc2402m firmware
- CVE-2021-36706 Command injection in prolink:prc2402m firmware
- CVE-2021-36705 Command injection in prolink:prc2402m firmware
- CVE-2021-36703 Cross-site scripting in htmly:htmly
- CVE-2021-36702 Cross-site scripting in htmly:htmly
- CVE-2021-36701 Path traversal in htmly:htmly
- CVE-2021-3670 Denial of service in samba
- CVE-2021-36698 Cross-site scripting in artica:pandora fms
- CVE-2021-36697 File upload in artica:pandora fms
- CVE-2021-36696 Cross-site scripting in deskpro:deskpro
- CVE-2021-36695 Cross-site scripting in deskpro:deskpro
- CVE-2021-36692 Denial of service in libjxl project:libjxl
- CVE-2021-36691 Denial of service in libjxl project:libjxl
- CVE-2021-36690 Denial of service in apple:iphone os
- CVE-2021-3669 Denial of service in kernel
- CVE-2021-36689 Weak cryptography in samourai-wallet-android project:samourai-wallet-android
- CVE-2021-36686 Cross-site Scripting in yapi-vendor
- CVE-2021-3667 Race condition in libvirt
- CVE-2021-36668 Other in druva:insync client
- CVE-2021-36667 Command injection in druva:insync client
- CVE-2021-36666 Privilege escalation in druva:insync client
- CVE-2021-36665 Privilege escalation in druva:insync client
- CVE-2021-3666 Prototype Pollution in fiznool/body-parser-xml
- CVE-2021-36654 Cross-site scripting in cmsuno project:cmsuno
- CVE-2021-36647 Weak cryptography in arm:mbed tls
- CVE-2021-36646 Cross-site scripting in kodcloud:kodexplorer
- CVE-2021-3664 Open Redirect in unshiftio/url-parse
- CVE-2021-36631 Privilege escalation in baidu:baidunetdisk
- CVE-2021-36630 Denial of service in ruckuswireless:sz-100 firmware
- CVE-2021-3663 Improper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii
- CVE-2021-36625 SQL Injection in Dolibarr
- CVE-2021-36624 SQL injection in phone shop sales management system project:phone shop sales management system
- CVE-2021-36623 File upload in phone shop sales management system project:phone shop sales management system
- CVE-2021-36622 File upload in online covid vaccination scheduler system project:online covid vaccination scheduler system
- CVE-2021-36621 SQL injection in online covid vaccination scheduler system project:online covid vaccination scheduler system
- CVE-2021-3662 Cross-site scripting in HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender
- CVE-2021-36614 Null dereference in mikrotik:routeros
- CVE-2021-36613 Null dereference in mikrotik:routeros
- CVE-2021-3661 Code injection in HP Workstation BIOS
- CVE-2021-36609 Cross-site scripting in webtareas project:webtareas
- CVE-2021-36608 Cross-site scripting in webtareas project:webtareas
- CVE-2021-36605 Cross-site scripting in engineercms project:engineercms
- CVE-2021-36603 Cross-site scripting in tasmota project:tasmota
- CVE-2021-36601 Cross-site scripting in get-simple:getsimplecms
- CVE-2021-3660 Other in cockpit
- CVE-2021-3659 Null dereference in Kernel
- CVE-2021-36584 Memory corruption in gpac:gpac
- CVE-2021-36582 File upload in kooboo:kooboo cms
- CVE-2021-36581 File upload in kooboo:kooboo cms
- CVE-2021-36580 Open redirect in icewarp:icewarp server
- CVE-2021-3658 Security feature bypass in bluez
- CVE-2021-36573 FeehiCMS Unrestricted Upload vulnerability
- CVE-2021-36572 FeehiCMS Cross Site Scripting vulnerability
- CVE-2021-36570 Cross-site request forgery in thedaylightstudio:fuel cms
- CVE-2021-3657 Memory corruption in isync
- CVE-2021-36569 Cross-site request forgery in thedaylightstudio:fuel cms
- CVE-2021-36568 Moodle Cross-site Scripting vulnerability
- CVE-2021-36567 Deserialization of Untrusted Data in topthink/framework
- CVE-2021-36564 Deserialization of Untrusted Data in topthink/framework
- CVE-2021-36563 Cross-site scripting in checkmk:checkmk
- CVE-2021-36560 Auth bypass in phone shop sales management system project:phone shop sales management system
- CVE-2021-3656 Missing authorization in KVM
- CVE-2021-36551 Cross-site scripting in tiki:tikiwiki cms\/groupware
- CVE-2021-36550 Cross-site scripting in tiki:tikiwiki cms\/groupware
- CVE-2021-3655 Information disclosure in kernel
- CVE-2021-36548 File upload in monstra:monstra
- CVE-2021-36547 File upload in mara cms project:mara cms
- CVE-2021-36546 Information disclosure in kitesky:kitecms
- CVE-2021-36545 Cross-site scripting in tpcms project:tpcms
- CVE-2021-36544 Information disclosure in tpcms project:tpcms
- CVE-2021-36543 Cross-site request forgery in seeddms:seeddms
- CVE-2021-36542 Cross-site request forgery in seeddms:seeddms
- CVE-2021-3654 Open Redirect in CPython that affects users of OpenStack Nova
- CVE-2021-36539 Missing authorization in instructure:canvas learning management service
- CVE-2021-36538 Cross-site scripting in gurock:testrail
- CVE-2021-36535 Memory corruption in cesanta:mjs
- CVE-2021-36532 Race condition in portfoliocms project:portfoliocms