Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 135 of 273.
- CVE-2021-3539 EspoCRM Avatar Persistent XSS
- CVE-2021-35388 Cross-site scripting in phpgurukul:hospital management system
- CVE-2021-35387 SQL injection in phpgurukul:hospital management system
- CVE-2021-35380 Path traversal in solari:termtalk server
- CVE-2021-3538 go.uuid has Predictable UUID Identifiers
- CVE-2021-35377 Cross-site scripting in vicidial:vicidial
- CVE-2021-35370 Code injection in txjia:imcat
- CVE-2021-3537 Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
- CVE-2021-35369 Path traversal in txjia:imcat
- CVE-2021-35368 Security feature bypass in debian:debian linux
- CVE-2021-35361 Cross-site scripting in dotcms:dotcms
- CVE-2021-35360 Cross-site scripting in dotcms:dotcms
- CVE-2021-3536 Cross-site Scripting in Wildfly
- CVE-2021-35358 Cross-site scripting in dotcms:dotcms
- CVE-2021-3535 Cross-site scripting in Rapid7 Nexpose
- CVE-2021-35346 Memory corruption in tsmuxer project:tsmuxer
- CVE-2021-35344 Memory corruption in tsmuxer project:tsmuxer
- CVE-2021-35343 Cross-site request forgery in seeddms:seeddms
- CVE-2021-35342 Auth bypass in northern.tech:useradm
- CVE-2021-35337 Missing authorization in phone shop sales management system project:phone shop sales management system
- CVE-2021-35336 Auth bypass in tieline:ip audtio gateway firmware
- CVE-2021-35331 Memory corruption in tcl:tcl
- CVE-2021-35327 Missing authorization in totolink:a720r firmware
- CVE-2021-35326 Information disclosure in totolink:a720r firmware
- CVE-2021-35325 Memory corruption in totolink:a720r firmware
- CVE-2021-35324 Auth bypass in totolink:a720r firmware
- CVE-2021-35323 Cross-site scripting in bludit:bludit
- CVE-2021-35312 Misconfiguration in gestionaleamica:amica prodigy
- CVE-2021-3531 Denial of service in ceph
- CVE-2021-35309 Privilege escalation in samsung:syncthru web service
- CVE-2021-35307 Null dereference in axiosys:bento4
- CVE-2021-35306 Null dereference in axiosys:bento4
- CVE-2021-35303 Cross-site scripting in zammad:zammad
- CVE-2021-35302 Missing authorization in zammad:zammad
- CVE-2021-35301 Missing authorization in zammad:zammad
- CVE-2021-35300 Other in zammad:zammad
- CVE-2021-3530 Denial of service in binutils
- CVE-2021-35299 Information disclosure in zammad:zammad
- CVE-2021-35298 Cross-site scripting in zammad:zammad
- CVE-2021-35297 Memory corruption in scalabium:dbase viewer
- CVE-2021-35296 Auth bypass in ptcl:hg150-ub firmware
- CVE-2021-35290 File upload in balero cms project:balero cms
- CVE-2021-3529 Cross-site scripting in noobaa-core
- CVE-2021-35284 SQL injection in cms-php project:cms-php
- CVE-2021-35283 SQL injection in atoms183 cms project:atoms183 cms
- CVE-2021-3528 Information disclosure in NooBaa
- CVE-2021-3527 Denial of service in QEMU
- CVE-2021-35269 Memory corruption in debian:debian linux
- CVE-2021-35268 Memory corruption in debian:debian linux
- CVE-2021-35267 Memory corruption in debian:debian linux
- CVE-2021-35266 Memory corruption in debian:debian linux
- CVE-2021-35265 Cross-site scripting in maxsite:maxsite cms
- CVE-2021-35261 File upload in bearadmin project:bearadmin
- CVE-2021-35254 Authenticated Remote Code Execution in WebHelpDesk 12.7.8
- CVE-2021-35252 Common Key Vulnerability in Serv-U FTP Server
- CVE-2021-35251 Sensitive Data Disclosure Vulnerability
- CVE-2021-35250 Directory Transversal Vulnerability in Serv-U 15.3
- CVE-2021-35249 Domain Admin Broken Access Control
- CVE-2021-35248 Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users
- CVE-2021-35247 SolarWinds Serv-U Improper Input Validation
- CVE-2021-35246 Unprotected Transport of Credentials (HSTS) Vulnerability
- CVE-2021-35245 Broken Access Control Vulnerability for SolarWinds Serv-U
- CVE-2021-35244 Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6
- CVE-2021-35243 HTTP PUT & DELETE Methods Enabled
- CVE-2021-35242 A valid CSRF token is present in response to an invalid request
- CVE-2021-35240 Stored XSS via Help Server settings
- CVE-2021-3524 Other in ceph
- CVE-2021-35239 Stored XSS in Maps text box hyperlink Vulnerability
- CVE-2021-35238 Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability
- CVE-2021-35237 Clickjacking Vulnerability
- CVE-2021-35236 Missing Secure Flag From SSL Cookie
- CVE-2021-35235 ASP.NET Debug Feature Enabled
- CVE-2021-35234 Exposed Dangerous Functions - Privileged Escalation
- CVE-2021-35233 HTTP TRACK & TRACE Methods Enabled
- CVE-2021-35232 Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries
- CVE-2021-35231 Unquoted Path (SMB Login) Vulnerability
- CVE-2021-35230 Unquoted Path Vulnerability (SMB Login) in Kiwi CatTools
- CVE-2021-3523 Security feature bypass in apicast
- CVE-2021-35229 Cross-Site Scripting Vulnerability using SQL Query
- CVE-2021-35228 Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388
- CVE-2021-35227 Insecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARM
- CVE-2021-35226 Hashed Credential Exposure Vulnerability
- CVE-2021-35225 Netpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5
- CVE-2021-35223 Execute Command Function Allows Remote Code Execution (RCE)Vulnerability
- CVE-2021-35222 Resource.aspx Reflected Cross-Site Scripting Vulnerability
- CVE-2021-35221 ImportAlert Improper Access Control Tampering Vulnerability
- CVE-2021-35220 EmailWebPage Command Injection RCE
- CVE-2021-3522 Memory corruption in GStreamer
- CVE-2021-35219 ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability
- CVE-2021-35218 Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2021-35217 Insecure Deserialization of untrusted data causing Remote code execution vulnerability.
- CVE-2021-35216 Deserialization of Untrusted Data in Resource Controls Remote Code Execution
- CVE-2021-35215 ActionPluginBaseView Deserialization of Untrusted Data RCE
- CVE-2021-35214 Session Management Vulnerability
- CVE-2021-35213 Orion User setting Improper Access Control Privilege Escalation Vulnerability
- CVE-2021-35212 Blind SQL injection Vulnerability
- CVE-2021-35211 SolarWinds Serv-U Remote Code Execution
- CVE-2021-35210 Cross site scripting in the system log
- CVE-2021-3521 Security feature bypass in RPM
- CVE-2021-35209 Server-side request forgery in zimbra:collaboration