Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 141 of 273.
- CVE-2021-3464 Privilege escalation in PCManager
- CVE-2021-34639 WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload
- CVE-2021-34638 WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal
- CVE-2021-34637 Post Index <= 0.7.5 Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-34636 Countdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-34635 Poll Maker <= 3.2.8 - Reflected Cross-Site Scripting
- CVE-2021-34634 Nifty Newsletters <= 4.0.23 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-34633 Youtube Feeder <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-34632 SEO Backlinks <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-34631 NewsPlugin <= 1.0.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-34630 Reflected XSS in GTranslate Pro and GTranslate Enterprise < 2.8.65
- CVE-2021-3463 Null dereference in Power Management Driver for Windows 10
- CVE-2021-34629 SendGrid <= 1.11.8 – Authorization Bypass
- CVE-2021-34628 Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-34627 WP Upload Restriction <= 2.2.3 - Missing Access Control in getSelectedMimeTypesByRole function
- CVE-2021-34626 WP Upload Restriction <= 2.2.3 - Missing Access Control in deleteCustomType function
- CVE-2021-34625 WP Upload Restriction <= 2.2.3 - Authenticated Stored Cross-Site Scripting
- CVE-2021-34624 ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component
- CVE-2021-34623 ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component
- CVE-2021-34622 ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation
- CVE-2021-34621 ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
- CVE-2021-34620 CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation
- CVE-2021-3462 Privilege escalation in Power Management Driver for Windows 10
- CVE-2021-34619 Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin
- CVE-2021-34618 Denial of service in Aruba Instant Access Points
- CVE-2021-34617 Cross-site scripting in Aruba Instant Access Points
- CVE-2021-34616 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-34615 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-34614 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-34613 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-34612 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-34611 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-34610 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-3461 Keycloak insufficient session expiration
- CVE-2021-34609 SQL injection in Aruba ClearPass Policy Manager
- CVE-2021-34606 XINJE XD/E Series PLC Program Tool DLL Hijacking
- CVE-2021-34605 Xinje XD/E Series PLC Program Tool Zip Slip
- CVE-2021-34602 Bender Charge Controller: Long URL could lead to webserver crash
- CVE-2021-34601 Bender Charge Controller: Hardcoded Credentials in Charge Controller
- CVE-2021-34600 Telenot complex: Insecure AES Key Generation
- CVE-2021-3460 Security feature bypass in MH702x
- CVE-2021-34599 Improper Certificate Validation in CODESYS Git
- CVE-2021-34598 Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality
- CVE-2021-34597 Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability
- CVE-2021-34596 CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service
- CVE-2021-34595 CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service
- CVE-2021-34594 Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server
- CVE-2021-34593 CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service
- CVE-2021-34592 Bender Charge Controller: Command injection via Web interface
- CVE-2021-34591 Bender Charge Controller: Local privilege Escalation
- CVE-2021-34590 Bender Charge Controller: Cross-site Scripting
- CVE-2021-3459 Command injection in MM1000 MoCA Adapter
- CVE-2021-34589 Bender Charge Controller: RFID leak
- CVE-2021-34588 Bender Charge Controller: Unprotected data export
- CVE-2021-34587 Bender Charge Controller: Long URL could lead to webserver crash
- CVE-2021-34586 CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)
- CVE-2021-34585 CODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)
- CVE-2021-34584 CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)
- CVE-2021-34583 CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)
- CVE-2021-34582 Phoenix Contact: FL MGUARD XSS through web-based management and REST API
- CVE-2021-34581 WAGO: Denial of Service vulnerability inside the OpenSSL implementation
- CVE-2021-34580 Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0
- CVE-2021-3458 Auth bypass in MM1000 MoCA Adapter
- CVE-2021-34579 PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management
- CVE-2021-34578 WAGO: Authentication Vulnerability in Web-Based Management
- CVE-2021-34577 Hardcoded credentials in Kaden PICOFLUX AiR
- CVE-2021-34576 Observable discrepancy in Kaden PICOFLUX AiR leaks water consumption
- CVE-2021-34575 Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0
- CVE-2021-34574 Password policy evasion in products of MB connect line and Helmholz
- CVE-2021-34573 Incorrect calculation in Enbra EWM does not report backflows or no flow events
- CVE-2021-34572 Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)
- CVE-2021-34571 Hard-coded Credentials in Enbra Wireless M-Bus devices
- CVE-2021-34570 Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS
- CVE-2021-3457 Missing authorization in smart proxy shellhooks
- CVE-2021-34569 WAGO I/O-Check Service prone to Out-of-bounds Write
- CVE-2021-34568 WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling
- CVE-2021-34567 WAGO I/O-Check Service prone to Out-of-bounds Read
- CVE-2021-34566 WAGO I/O-Check Service prone to Memory Overflow
- CVE-2021-34565 In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found
- CVE-2021-34564 In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie
- CVE-2021-34563 Misconfiguration in WHA-GW-F2D2-0-AS- Z2-ETH
- CVE-2021-34562 Cross-site scripting in WHA-GW-F2D2-0-AS- Z2-ETH
- CVE-2021-34561 Security feature bypass in WHA-GW-F2D2-0-AS- Z2-ETH
- CVE-2021-34560 A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information
- CVE-2021-3456 Missing authorization in smart proxy salt
- CVE-2021-34559 Other in WHA-GW-F2D2-0-AS- Z2-ETH
- CVE-2021-34558 Denial of service in fedoraproject:fedora
- CVE-2021-34557 Memory corruption in fedoraproject:fedora
- CVE-2021-34556 Information disclosure in debian:debian linux
- CVE-2021-34555 Null dereference in fedoraproject:fedora
- CVE-2021-34553 Path traversal in sonatype:nexus repository manager
- CVE-2021-34552 Buffer Overflow in Pillow
- CVE-2021-34551 Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
- CVE-2021-34550 Memory corruption in torproject:tor
- CVE-2021-3455 Disconnecting L2CAP channel right after invalid ATT request leads freeze
- CVE-2021-34549 Denial of service in torproject:tor
- CVE-2021-34548 Auth bypass in torproject:tor
- CVE-2021-34547 Cross-site request forgery in paessler:prtg network monitor
- CVE-2021-34546 Auth bypass in netsetman:netsetman
- CVE-2021-34544 Information disclosure in bkw:solar-log 500 firmware