Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 150 of 273.
- CVE-2021-3341 Path traversal in dh2i:dxenterprise
- CVE-2021-33408 Path traversal in abinitio:control\>center
- CVE-2021-33403 Integer overflow in blocklancertoken project:blocklancertoken
- CVE-2021-3340 Cross-site scripting in wikindx project:wikindx
- CVE-2021-33396 Cross-site request forgery in baijiacms project:baijiacms
- CVE-2021-33394 Auth bypass in cubecart:cubecart
- CVE-2021-33393 Misconfiguration in ipfire:ipfire
- CVE-2021-33391 Use after free in htacg:tidy
- CVE-2021-33390 Use after free in dpic project:dpic
- CVE-2021-3339 Missing authorization in microsoft:modernflow
- CVE-2021-33388 Memory corruption in dpic project:dpic
- CVE-2021-33387 Cross-site scripting in 1234n:minicms
- CVE-2021-33371 Cross-site scripting in kabir-m-alhasan:student management system
- CVE-2021-3337 Security feature bypass in hide thread content project:hide thread content
- CVE-2021-33367 Memory corruption in freeimage project:freeimage
- CVE-2021-33366 Denial of service in gpac:gpac
- CVE-2021-33365 Denial of service in gpac:gpac
- CVE-2021-33364 Denial of service in gpac:gpac
- CVE-2021-33363 Denial of service in gpac:gpac
- CVE-2021-33362 Memory corruption in gpac:gpac
- CVE-2021-33361 Denial of service in gpac:gpac
- CVE-2021-33360 stoqey/gnuplot is vulnerable to command injection
- CVE-2021-3336 Security feature bypass in wolfssl:wolfssl
- CVE-2021-33359 Path traversal in sensepost:gowitness
- CVE-2021-33358 Command injection in raspap:raspap
- CVE-2021-33357 Command injection in raspap:raspap
- CVE-2021-33356 Privilege escalation in raspap:raspap
- CVE-2021-33354 Path traversal in htmly:htmly
- CVE-2021-33353 Path traversal in wyomind:help desk
- CVE-2021-33352 File upload in wyomind:help desk
- CVE-2021-33351 Cross-site scripting in wyomind:help desk
- CVE-2021-33348 Cross-site scripting in jfinal
- CVE-2021-33347 Cross-site scripting in jpress:jpress
- CVE-2021-33346 Auth bypass in dlink:dsl-2888a firmware
- CVE-2021-33339 Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting
- CVE-2021-33338 Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs
- CVE-2021-33337 Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module
- CVE-2021-33336 Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
- CVE-2021-33335 Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers
- CVE-2021-33334 Liferay Portal and Liferay DXP Fails to Properly Check User Permissions
- CVE-2021-33333 Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions
- CVE-2021-33332 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
- CVE-2021-33331 Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs
- CVE-2021-33330 Exposure of Resource to Wrong Sphere in Liferay Portal
- CVE-2021-3333 Cross-site scripting in opmantek:open-audit
- CVE-2021-33328 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page
- CVE-2021-33327 Liferay Portal and Liferay DXP does not properly check user permission
- CVE-2021-33326 Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module
- CVE-2021-33325 Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
- CVE-2021-33324 Liferay Portal and Liferay DXP Don't Check Permissions of Pages
- CVE-2021-33323 Liferay Portal and Liferay DXP autosaves form data for other users to see
- CVE-2021-33322 Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use
- CVE-2021-33321 Liferay Portal and Liferay DXP insecure default configuration
- CVE-2021-33320 Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate
- CVE-2021-3332 Auth bypass in wpserveur:wps hide login
- CVE-2021-33318 Improper Input Validation in IpMatcher
- CVE-2021-33317 Null dereference in trendnet:teg-30102ws firmware
- CVE-2021-33316 Integer overflow in trendnet:teg-30102ws firmware
- CVE-2021-33315 Integer overflow in trendnet:teg-30102ws firmware
- CVE-2021-3331 Code injection in winscp:winscp
- CVE-2021-33304 Memory corruption in altran:picotcp
- CVE-2021-3330 RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr
- CVE-2021-33295 Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags
- CVE-2021-33294 Denial of service in elfutils project:elfutils
- CVE-2021-33293 Memory corruption in debian:debian linux
- CVE-2021-3329 DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer
- CVE-2021-33289 Memory corruption in debian:debian linux
- CVE-2021-33287 Memory corruption in debian:debian linux
- CVE-2021-33286 Memory corruption in debian:debian linux
- CVE-2021-33285 Memory corruption in debian:debian linux
- CVE-2021-3328 Memory corruption in aprelium:abyss web server x1
- CVE-2021-33274 Memory corruption in dlink:dir-809 firmware
- CVE-2021-33271 Memory corruption in dlink:dir-809 firmware
- CVE-2021-33270 Memory corruption in dlink:dir-809 firmware
- CVE-2021-3327 Cross-site scripting in ovation:dynamic content
- CVE-2021-33269 Memory corruption in dlink:dir-809 firmware
- CVE-2021-33268 Memory corruption in dlink:dir-809 firmware
- CVE-2021-33267 Memory corruption in dlink:dir-809 firmware
- CVE-2021-33266 Memory corruption in dlink:dir-809 firmware
- CVE-2021-33265 Memory corruption in dlink:dir-809 firmware
- CVE-2021-3326 Denial of service in debian:debian linux
- CVE-2021-33259 Missing authorization in d-link:dir-868lw firmware
- CVE-2021-33256 Code injection in zohocorp:manageengine adselfservice plus
- CVE-2021-33254 Null dereference in embedthis:appweb
- CVE-2021-3325 Auth bypass in fedoraproject:fedora
- CVE-2021-33231 Cross-site scripting in easyvista:service manager
- CVE-2021-3323 Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr
- CVE-2021-33226 Code injection in saltstack:salt
- CVE-2021-33224 File upload in umbraco:umbraco forms
- CVE-2021-33223 Privilege escalation in seeddms:seeddms
- CVE-2021-33221 Missing authorization in commscope:ruckus iot controller
- CVE-2021-33220 Hardcoded credentials in commscope:ruckus iot controller
- CVE-2021-3322 Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr
- CVE-2021-33219 Hardcoded credentials in commscope:ruckus iot controller
- CVE-2021-33218 Hardcoded credentials in commscope:ruckus iot controller
- CVE-2021-33217 Path traversal in commscope:ruckus iot controller
- CVE-2021-33216 Hardcoded credentials in commscope:ruckus iot controller
- CVE-2021-33215 Path traversal in commscope:ruckus iot controller
- CVE-2021-33214 Misconfiguration in hms-networks:ecatcher
- CVE-2021-33213 Server-side request forgery in element-it:http commander