Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 164 of 273.
- CVE-2021-31422 Race condition in Desktop
- CVE-2021-31421 Path traversal in Desktop
- CVE-2021-31420 Memory corruption in Desktop
- CVE-2021-31419 Information disclosure in Desktop
- CVE-2021-31418 Information disclosure in Desktop
- CVE-2021-31417 Information disclosure in Desktop
- CVE-2021-31414 Code injection in rpm spec project:rpm spec
- CVE-2021-31412 Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
- CVE-2021-31411 Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
- CVE-2021-31410 Project sources exposure in Vaadin Designer
- CVE-2021-3141 Information disclosure in unisys:stealth
- CVE-2021-31409 Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
- CVE-2021-31408 Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
- CVE-2021-31407 Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19
- CVE-2021-31406 Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
- CVE-2021-31405 Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
- CVE-2021-31404 Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
- CVE-2021-31403 Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
- CVE-2021-31402 dio vulnerable to CRLF injection with HTTP method string
- CVE-2021-31401 Integer overflow in hcc-embedded:nichestack
- CVE-2021-31400 Denial of service in hcc-embedded:nichestack
- CVE-2021-31399 Weak cryptography in 2n:access unit 2.0 firmware
- CVE-2021-3139 Path traversal in tcmu-runner project:tcmu-runner
- CVE-2021-31386 Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.
- CVE-2021-31385 Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root
- CVE-2021-31384 Missing authorization in Junos OS
- CVE-2021-31383 Memory corruption in Junos OS
- CVE-2021-31382 Race condition in Junos OS
- CVE-2021-31381 SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files
- CVE-2021-31380 Information disclosure in SRC Series
- CVE-2021-3138 Security feature bypass in discourse:discourse
- CVE-2021-31379 Denial of service in Junos OS
- CVE-2021-31378 Denial of service in Junos OS
- CVE-2021-31377 Junos OS: A local authenticated attacker can cause RPD to core
- CVE-2021-31376 Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets
- CVE-2021-31375 Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed
- CVE-2021-31374 Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.
- CVE-2021-31373 Junos OS: SRX Series: Persistent XSS vulnerability in J-Web
- CVE-2021-31372 Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
- CVE-2021-31371 Information disclosure in Junos OS
- CVE-2021-31370 Denial of service in Junos OS
- CVE-2021-3137 Cross Site Scripting (XSS) in XWiki
- CVE-2021-31369 Denial of service in Junos OS
- CVE-2021-31368 Denial of service in Junos OS
- CVE-2021-31367 Denial of service in Junos OS
- CVE-2021-31366 Denial of service in Junos OS
- CVE-2021-31365 Denial of service in Junos OS
- CVE-2021-31364 Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received
- CVE-2021-31363 Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service
- CVE-2021-31362 Denial of service in Junos OS
- CVE-2021-31361 Denial of service in Junos OS
- CVE-2021-31360 Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing
- CVE-2021-31359 Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability
- CVE-2021-31358 Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script
- CVE-2021-31357 Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script
- CVE-2021-31356 Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts
- CVE-2021-31355 Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal
- CVE-2021-31354 Memory corruption in Junos OS
- CVE-2021-31353 Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update
- CVE-2021-31352 SRC Series: NETCONF over SSH allows negotiation of weak ciphers
- CVE-2021-31351 Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset
- CVE-2021-31350 Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)
- CVE-2021-3135 Cross-site scripting in tagdiv:newspaper
- CVE-2021-31349 Session Smart Router: Authentication Bypass Vulnerability
- CVE-2021-31348 Memory corruption in debian:debian linux
- CVE-2021-31347 Memory corruption in debian:debian linux
- CVE-2021-31346 Memory corruption in Capital Embedded AR Classic 431-422
- CVE-2021-31345 Other in Capital Embedded AR Classic 431-422
- CVE-2021-31344 Other in Capital Embedded AR Classic 431-422
- CVE-2021-31343 Memory corruption in Siemens Solid Edge
- CVE-2021-31342 Memory corruption in Siemens Solid Edge
- CVE-2021-31341 Information disclosure in Mendix Database Replication Module
- CVE-2021-31340 Denial of service in SIMATIC RF166C
- CVE-2021-3134 Privilege escalation in mubu:mubu
- CVE-2021-31339 Information disclosure in Mendix Excel Importer Module
- CVE-2021-31338 Missing authorization in SINEMA Remote Connect Client
- CVE-2021-31337 Auth bypass in SINAMICS Medium Voltage Products
- CVE-2021-31330 Cross-site scripting in reviewboard:review board
- CVE-2021-3133 Cross-site request forgery in sean-barton:elementor contact form db
- CVE-2021-31329 Cross-site scripting in remoteclinic:remote clinic
- CVE-2021-31327 Cross-site scripting in remoteclinic:remote clinic
- CVE-2021-31326 Auth bypass in dlink:dir-816 firmware
- CVE-2021-31324 Command injection in control-webpanel:webpanel
- CVE-2021-31323 Memory corruption in telegram:telegram
- CVE-2021-31322 Memory corruption in telegram:telegram
- CVE-2021-31321 Memory corruption in telegram:telegram
- CVE-2021-31320 Memory corruption in telegram:telegram
- CVE-2021-31319 Integer overflow in telegram:telegram
- CVE-2021-31318 Memory corruption in telegram:telegram
- CVE-2021-31317 Memory corruption in telegram:telegram
- CVE-2021-31316 SQL injection in control-webpanel:webpanel
- CVE-2021-31315 Memory corruption in telegram:telegram
- CVE-2021-31314 File upload in ejinshan:terminal security system
- CVE-2021-3131 Information disclosure in 1c:1c\
- CVE-2021-3130 Information disclosure in opmantek:open-audit
- CVE-2021-31294 Denial of service in redis:redis
- CVE-2021-31292 Integer overflow in debian:debian linux
- CVE-2021-3129 Laravel Ignition File Upload
- CVE-2021-31280 Cross-site scripting in tp5cms project:tp5cms
- CVE-2021-3128 Denial of service in asus:rt-ac1750 b1 firmware