Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 156 of 273.
- CVE-2021-32623 Opencast vulnerable to billion laughs attack (XML bomb)
- CVE-2021-32622 File upload local preview can run embedded scripts after user interaction
- CVE-2021-32621 Script injection without script or programming rights through Gadget titles
- CVE-2021-32620 Users registered with email verification can self re-activate their disabled accounts
- CVE-2021-3262 SQL injection in trispark:novusedu
- CVE-2021-32619 Static imports inside dynamically imported modules do not adhere to permission checks
- CVE-2021-32618 Open Redirect Vulnerability
- CVE-2021-32617 Denial of service in Exiv2
- CVE-2021-32616 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in 1CDN
- CVE-2021-32615 SQL injection in piwigo:piwigo
- CVE-2021-32614 Memory corruption in dmg2img
- CVE-2021-32613 Memory corruption in radare2
- CVE-2021-32612 Information disclosure in i-doo:veryfitpro
- CVE-2021-32611 Null dereference in antisip:exosip2
- CVE-2021-32610 Directory Traversal in Archive_Tar
- CVE-2021-32609 XSS vulnerability on Explore page
- CVE-2021-32608 Cross-site scripting in smartstore:smartstore
- CVE-2021-32607 Cross-site scripting in smartstore:smartstore
- CVE-2021-32606 Use after free in fedoraproject:fedora
- CVE-2021-32605 Command injection in zzzcms:zzzphp
- CVE-2021-32604 Cross-site scripting in solarwinds:serv-u
- CVE-2021-32603 Server-side request forgery in Fortinet FortiAnalyzer, FortiManager
- CVE-2021-32602 Cross-site scripting in Fortinet FortiPortal
- CVE-2021-32600 Information disclosure in Fortinet FortiOS
- CVE-2021-32598 Other in Fortinet FortiAnalyzer, FortiManager
- CVE-2021-32597 Cross-site scripting in Fortinet FortiAnalyzer, FortiManager
- CVE-2021-32596 Weak cryptography in Fortinet FortiPortal
- CVE-2021-32595 Denial of service in Fortinet FortiPortal
- CVE-2021-32594 File upload in Fortinet FortiPortal
- CVE-2021-32593 Weak cryptography in Fortinet FortiWAN
- CVE-2021-32592 Other in Fortinet FortiClientWindows, FortiClientEMS
- CVE-2021-32591 Weak cryptography in Fortinet FortiSandbox
- CVE-2021-32590 SQL injection in Fortinet FortiPortal
- CVE-2021-32589 Use after free in FortiAnalyzer
- CVE-2021-32588 Hardcoded credentials in Fortinet FortiPortal
- CVE-2021-32587 Missing authorization in Fortinet FortiAnalyzer, FortiManager
- CVE-2021-32586 Other in Fortinet FortiMail
- CVE-2021-32585 Cross-site scripting in Fortinet FortiWAN
- CVE-2021-32584 Missing authorization in FortiWLC
- CVE-2021-32582 SQL injection in connectwise:connectwise automate
- CVE-2021-32581 Security feature bypass in acronis:cyber protect cloud
- CVE-2021-32580 Privilege escalation in acronis:true image
- CVE-2021-3258 Cross-site scripting in qa-themes:q2a ultimate seo
- CVE-2021-32579 Auth bypass in acronis:true image
- CVE-2021-32578 Privilege escalation in acronis:true image
- CVE-2021-32577 Privilege escalation in acronis:true image
- CVE-2021-32576 Privilege escalation in acronis:true image
- CVE-2021-32575 Improper network isolation in Hashicorp Nomad
- CVE-2021-32574 Hashicorp Consul Missing SSL Certificate Validation
- CVE-2021-32573 Cross-site Scripting in express-cart
- CVE-2021-32572 Path traversal in specotech:web viewer
- CVE-2021-32571 Information disclosure in ericsson:operations support system-radio and core firmware
- CVE-2021-32570 Information disclosure in ericsson:network manager
- CVE-2021-32569 Cross-site scripting in ericsson:operations support system-radio and core firmware
- CVE-2021-32568 Deserialization of Untrusted Data in zmister2016/mrdoc
- CVE-2021-32567 Reading HTTP/2 frames too many times
- CVE-2021-32566 Specific sequence of HTTP/2 frames can cause ATS to crash
- CVE-2021-32565 HTTP Request Smuggling, content length with invalid charters
- CVE-2021-32563 Code injection in xfce:thunar
- CVE-2021-32561 OctoPrint API Error Messages vulnerable to XSS
- CVE-2021-32560 OctoPrint Incorrect Access Control
- CVE-2021-3256 Path traversal in kuaifan:kuaifancms
- CVE-2021-32559 Integer overflow in pywin32
- CVE-2021-32558 Denial of service in debian:debian linux
- CVE-2021-32557 apport process_report() arbitrary file write
- CVE-2021-32556 apport get_modified_conffiles() function command injection
- CVE-2021-32555 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32554 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32553 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32552 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32551 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32550 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32549 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32548 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32547 apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32546 OS Command Injection in gogs
- CVE-2021-32545 Denial of service in pexip:infinity
- CVE-2021-32544 Intelligent global technology Ltd, igt+ - DOM-based Cross-Site Scripting
- CVE-2021-32543 SysJust CTS Web - Broken Authentication
- CVE-2021-32542 SysJust CTS Web - Reflected XSS
- CVE-2021-32541 SysJust CTS Web - Broken Access Control
- CVE-2021-32540 Hundred Plus 101EIP - Stored XSS-2
- CVE-2021-3254 Denial of service in asus:dsl-n14u-b1 firmware
- CVE-2021-32539 Hundred Plus 101EIP - Stored XSS-1
- CVE-2021-32538 ARTWARE CMS - Unrestricted Upload of File
- CVE-2021-32537 Realtek High definition audio Windows driver crashed
- CVE-2021-32536 MCU Technologies MCUsystem - Reflected XSS
- CVE-2021-32535 QSAN SANOS - Use of Hard-coded Credentials
- CVE-2021-32534 QSAN SANOS - Command Injection
- CVE-2021-32533 QSAN SANOS - Command Injection
- CVE-2021-32532 QSAN XEVO - Path Traversal
- CVE-2021-32531 QSAN XEVO - Command Injection Following via Init function
- CVE-2021-32530 QSAN XEVO - Command Injection Following via Array function
- CVE-2021-32529 QSAN XEVO, SANOS - Command Injection -1
- CVE-2021-32528 QSAN Storage Manager - Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2021-32527 QSAN Storage Manager - Path Traversal-2
- CVE-2021-32526 QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource
- CVE-2021-32525 QSAN Storage Manager - Use of Hard-coded Password-2
- CVE-2021-32524 QSAN Storage Manager - Command Injection-3
- CVE-2021-32523 QSAN Storage Manager - Improper Authorization