Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 153 of 273.
- CVE-2021-32965 Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write
- CVE-2021-32964 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel
- CVE-2021-32963 AVEVA SuiteLink Server Null Pointer Dereference
- CVE-2021-32962 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel
- CVE-2021-32961 MDT AutoSave Unrestricted Upload of File with Dangerous Type
- CVE-2021-32960 Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure
- CVE-2021-32959 AVEVA SuiteLink Server Buffer Overflow
- CVE-2021-32958 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel
- CVE-2021-32957 MDT AutoSave Uncontrolled Search Path Element
- CVE-2021-32956 Open redirect in Advantech WebAccess/SCADA
- CVE-2021-32955 File upload in Delta Electronics DIAEnergie
- CVE-2021-32954 Path traversal in Advantech WebAccess/SCADA
- CVE-2021-32953 MDT AutoSave SQL Injection
- CVE-2021-32952 Memory corruption in Drawings SDK
- CVE-2021-32951 Advantech WebAccess/NMS Improper Authentication
- CVE-2021-32950 Memory corruption in Drawings SDK
- CVE-2021-32949 MDT AutoSave Relative Path Traversal
- CVE-2021-32948 Memory corruption in Drawings SDK
- CVE-2021-32947 Memory corruption in FATEK Automation FvDesigner
- CVE-2021-32946 Memory corruption in Drawings SDK
- CVE-2021-32945 MDT AutoSave Inadequate Encryption Strength
- CVE-2021-32944 Use after free in Drawings SDK
- CVE-2021-32943 Memory corruption in WebAccess/SCADA
- CVE-2021-32942 Information disclosure in InTouch
- CVE-2021-32941 Annke Network Video Recorder - Stack-based Buffer Overflow
- CVE-2021-32940 Memory corruption in Drawings SDK
- CVE-2021-3294 Cross-site scripting in casap automated enrollment system project:casap automated enrollment system
- CVE-2021-32939 Memory corruption in FATEK Automation FvDesigner
- CVE-2021-32938 Memory corruption in Drawings SDK
- CVE-2021-32937 MDT AutoSave Generation of Error Message Containing Sensitive Information
- CVE-2021-32936 Memory corruption in Drawings SDK
- CVE-2021-32935 Cognex In-Sight OPC Server - Deserialization of Untrusted Data
- CVE-2021-32934 ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information
- CVE-2021-32933 MDT AutoSave Command Injection
- CVE-2021-32932 SQL injection in iView
- CVE-2021-32931 Memory corruption in FATEK Automation FvDesigner
- CVE-2021-32930 Missing authorization in iView
- CVE-2021-3293 Information disclosure in emlog:emlog
- CVE-2021-32929 Uffizio GPS Tracker Cross-site Request Forgery
- CVE-2021-32928 Misconfiguration in Sentinel LDK Run-Time Environment
- CVE-2021-32927 Uffizio GPS Tracker Cross-site Scripting
- CVE-2021-32926 Auth bypass in Micro800, MicroLogix 1400
- CVE-2021-32925 XML external entity in chamilo:chamilo
- CVE-2021-32924 Code injection in invisioncommunity:ips community suite
- CVE-2021-32923 Invalid session token expiration
- CVE-2021-32921 Weak cryptography in debian:debian linux
- CVE-2021-32920 Denial of service in debian:debian linux
- CVE-2021-32919 Auth bypass in debian:debian linux
- CVE-2021-32918 Denial of service in debian:debian linux
- CVE-2021-32917 Missing authorization in debian:debian linux
- CVE-2021-3291 Zen Cart vulnerable to authenticated remote code execution
- CVE-2021-3287 Deserialization in zohocorp:manageengine opmanager
- CVE-2021-32862 nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
- CVE-2021-32860 iziModal vulnerable to Cross-site Scripting
- CVE-2021-3286 SQL injection in spotweb project:spotweb
- CVE-2021-32859 Baremetrics date range picker vulnerable to Cross-site Scripting
- CVE-2021-32858 esdoc-publish-html-plugin vulnerable to Cross-site Scripting
- CVE-2021-32857 Cockpit vulnerable to Cross-site Scripting
- CVE-2021-32856 Microweber vulnerable to Cross-site Scripting
- CVE-2021-32855 vditor vulnerable to Cross-site Scripting
- CVE-2021-32854 textAngular text editor vulnerable to Cross-site Scripting
- CVE-2021-32853 Erxes vulnerable to Cross-site Scripting
- CVE-2021-32852 countly-server vulnerable to Cross-site Scripting
- CVE-2021-32851 jQuery MiniColors vulnerable to Cross-site Scripting
- CVE-2021-32850 jQuery MiniColors vulnerable to Cross-site Scripting
- CVE-2021-3285 Security feature bypass in ti:code composer studio intgrated development environment
- CVE-2021-32849 Arbitrary command execution in Gerapy
- CVE-2021-32848 Octobox ReDoS vulnerability
- CVE-2021-32847 Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx
- CVE-2021-32846 Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx
- CVE-2021-32845 Moby HyperKit uninitialized memory use vtrnd pci_vtrnd_notify
- CVE-2021-32844 Null dereference in hyperkit
- CVE-2021-32843 Null dereference in hyperkit
- CVE-2021-32842 Path Traversal in SharpZipLib
- CVE-2021-32841 Path Traversal in SharpZipLib
- CVE-2021-32840 Path Traversal in SharpZipLib
- CVE-2021-32839 Regular Expression Denial of Service in sqlparse
- CVE-2021-32838 Regular Expression Denial of Service in flask-restx
- CVE-2021-32837 mechanize vulnerable to ReDoS
- CVE-2021-32836 Pre-auth unsafe deserialization in ZStack
- CVE-2021-32835 Groovy Sandbox escape in Eclipse Keti
- CVE-2021-32834 Arbitrary Groovy script evaluation in Eclipse Keti
- CVE-2021-32833 Unauthenticated file read in Emby Server
- CVE-2021-32832 ReDOS in Rocket.Chat
- CVE-2021-32831 Code injection in total.js
- CVE-2021-32830 Command injection in @diez/generation
- CVE-2021-3283 Improper Privilege Management in HashiCorp Nomad
- CVE-2021-32829 Post-authentication Remote Code Execution (RCE) in ZStack REST API
- CVE-2021-32828 Regular expression Denial of Service in MooTools
- CVE-2021-32827 Arbitrary code execution in MockServer
- CVE-2021-32826 Remote code execution in Proxyee-Down
- CVE-2021-32825 ZipSlip vulnerability in bblfshd
- CVE-2021-32824 Regular expression Denial of Service in MooTools
- CVE-2021-32823 Potential Denial-of-Service in bindata
- CVE-2021-32822 File disclosure in hbs
- CVE-2021-32821 Regular expression Denial of Service in MooTools
- CVE-2021-32820 File disclosure in Express Handlebars
- CVE-2021-3282 Improper Authentication in HashiCorp Vault
- CVE-2021-32819 Remote code execution in squirrelly
- CVE-2021-32818 Remote code execution and Reflected cross site scripting in haml-coffee