Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 162 of 273.
- CVE-2021-31658 Memory corruption in tp-link:tl-sg2005 firmware
- CVE-2021-31655 Cross-site scripting in trendnet:tv-ip110wn firmware
- CVE-2021-31651 Cross-site scripting in neofr:neofrag
- CVE-2021-31650 SQL injection in online grading system project:online grading system
- CVE-2021-3165 Privilege escalation in missionlabs:smartagent
- CVE-2021-31649 JFinal Java Deserialization Vulnerability
- CVE-2021-31646 Weak cryptography in gestsup:gestsup
- CVE-2021-31645 Denial of service in glftpd:glftpd
- CVE-2021-31643 Cross-site scripting in chiyu-tech:bf-630 firmware
- CVE-2021-31642 Integer overflow in chiyu-tech:bf-630 firmware
- CVE-2021-31641 Cross-site scripting in chiyu-tech:bf-430 firmware
- CVE-2021-3164 File upload in churchdesk:churchrota
- CVE-2021-31637 Code injection in uwamp project:uwamp
- CVE-2021-31635 jFinal Server-Side Template Injection vulnerability
- CVE-2021-31632 SQL injection in b2evolution:b2evolution cms
- CVE-2021-31631 Cross-site request forgery in b2evolution:b2evolution cms
- CVE-2021-31630 Command injection in openplcproject:openplc v3 firmware
- CVE-2021-3163 Cross-site Scripting in quill
- CVE-2021-31627 Memory corruption in tendacn:ac9 firmware
- CVE-2021-31624 Memory corruption in tendacn:ac9 firmware
- CVE-2021-3162 Privilege escalation in docker:docker
- CVE-2021-31618 NULL pointer dereference on specially crafted HTTP/2 request
- CVE-2021-31617 Memory corruption in stormshield:stormshield network security
- CVE-2021-31616 Memory corruption in shapeshift:keepkey firmware
- CVE-2021-31615 Race condition in bluetooth:bluetooth core specification
- CVE-2021-31613 Denial of service in zh-jieli:ac6901 firmware
- CVE-2021-31612 Denial of service in zh-jieli:ac6901 firmware
- CVE-2021-31611 Denial of service in zh-jieli:ac6901 firmware
- CVE-2021-31610 Denial of service in bluetrum:ab5376t firmware
- CVE-2021-31609 Denial of service in silabs:iwrap
- CVE-2021-31608 Security feature bypass in proofpoint:enterprise protection
- CVE-2021-31607 Command Injection in SaltStack Salt
- CVE-2021-31606 furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients
- CVE-2021-31605 furlongm openvpn-monitor command injection
- CVE-2021-31604 furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client
- CVE-2021-31602 Auth bypass in hitachi:vantara pentaho
- CVE-2021-31601 Missing authorization in hitachi:vantara pentaho
- CVE-2021-31600 Information disclosure in hitachi:vantara pentaho
- CVE-2021-3160 Deserialization in aca:assuweb
- CVE-2021-31599 Code injection in hitachi:vantara pentaho
- CVE-2021-31598 Memory corruption in debian:debian linux
- CVE-2021-31597 Improper Certificate Validation in xmlhttprequest-ssl
- CVE-2021-31590 Privilege escalation in pwndoc project:pwndoc
- CVE-2021-3159 Cross-site scripting in landray:landray ekp
- CVE-2021-31589 Cross-site scripting in beyondtrust:appliance base software
- CVE-2021-31586 SQL injection in accellion:kiteworks
- CVE-2021-31585 Privilege escalation in accellion:kiteworks
- CVE-2021-31584 Cross-site request forgery in sipwise:next generation communication platform
- CVE-2021-31583 Cross-site scripting in sipwise:next generation communication platform
- CVE-2021-31581 Akkadian Provisioning Manager Engine (PME) Shell Escape via 'vi' editor interface
- CVE-2021-31580 Akkadian Provisioning Manager Engine (PME) Shell Escape via 'exec' command
- CVE-2021-31579 Akkadian Provisioning Manager Engine (PME) Hard-Coded Credentials
- CVE-2021-31578 Memory corruption in EN7528, EN7580
- CVE-2021-31577 Missing authorization in EN7528, EN7580
- CVE-2021-31576 Missing authorization in EN7528, EN7580
- CVE-2021-31575 Command injection in EN7528, EN7580
- CVE-2021-31574 Command injection in EN7528, EN7580
- CVE-2021-31573 Command injection in EN7528, EN7580
- CVE-2021-31572 Integer overflow in amazon:freertos
- CVE-2021-31571 Integer overflow in amazon:freertos
- CVE-2021-31567 WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability
- CVE-2021-31566 Path traversal in libarchive
- CVE-2021-31562 Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
- CVE-2021-3156 Sudo Heap-Based Buffer Overflow
- CVE-2021-31559 S2S TcpToken authentication bypass
- CVE-2021-31558 Delta Electronics DIAEnergie (Update A)
- CVE-2021-31556 Other in fedoraproject:fedora
- CVE-2021-31555 Other in mediawiki:mediawiki
- CVE-2021-31554 Security feature bypass in mediawiki:mediawiki
- CVE-2021-31553 Denial of service in mediawiki:mediawiki
- CVE-2021-31552 Business logic in mediawiki:mediawiki
- CVE-2021-31551 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-31550 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-3155 snapd created ~/snap with too-wide permissions
- CVE-2021-31549 Information disclosure in mediawiki:mediawiki
- CVE-2021-31548 Security feature bypass in mediawiki:mediawiki
- CVE-2021-31547 Information disclosure in mediawiki:mediawiki
- CVE-2021-31546 Information disclosure in mediawiki:mediawiki
- CVE-2021-31545 Information disclosure in mediawiki:mediawiki
- CVE-2021-31542 Path Traversal in Django
- CVE-2021-31540 Misconfiguration in wowza:streaming engine
- CVE-2021-3154 Code injection in solarwinds:serv-u
- CVE-2021-31539 Information disclosure in wowza:streaming engine
- CVE-2021-31538 Path traversal in lancom-systems:lcos fx
- CVE-2021-31537 Cross-site scripting in sisinformatik:sis-rewe go
- CVE-2021-31535 Memory corruption in fedoraproject:fedora
- CVE-2021-31532 Security feature bypass in nxp:i.mx rt500 firmware
- CVE-2021-31531 Server-side request forgery in zohocorp:manageengine servicedesk plus msp
- CVE-2021-31530 Information disclosure in zohocorp:manageengine servicedesk plus msp
- CVE-2021-3153 Security feature bypass in hashicorp:terraform enterprise
- CVE-2021-31525 golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion
- CVE-2021-31523 Privilege escalation in xscreensaver project:xscreensaver
- CVE-2021-31522 Apache Kylin unsafe class loading
- CVE-2021-31521 Cross-site scripting in Trend Micro InterScan Web Security Virtual Appliance
- CVE-2021-31520 Auth bypass in Trend Micro IM Security
- CVE-2021-3152 Path traversal in home-assistant:home-assistant
- CVE-2021-31519 Privilege escalation in Trend Micro HouseCall for Home Networks
- CVE-2021-31518 Denial of service in Trend Micro Home Network Security
- CVE-2021-31517 Denial of service in Trend Micro Home Network Security
- CVE-2021-31516 Use after free in Binary Ninja