Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 173 of 273.
- CVE-2021-30185 Indico Tampering with links (e.g. password reset) in sent emails
- CVE-2021-30184 Memory corruption in fedoraproject:fedora
- CVE-2021-30183 Information disclosure in octopus:server
- CVE-2021-30181 Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)
- CVE-2021-30180 Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)
- CVE-2021-3018 SQL injection in ipeak:ipeakcms
- CVE-2021-30179 Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter
- CVE-2021-30178 Null dereference in fedoraproject:fedora
- CVE-2021-30177 SQL injection in phpnuke:php-nuke
- CVE-2021-30176 SQL injection in zerof:expert
- CVE-2021-30175 SQL injection in zerof:web server
- CVE-2021-30174 RiyaLab Co., Ltd. CloudISO - Stored XSS
- CVE-2021-30173 Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion
- CVE-2021-30172 Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS
- CVE-2021-30171 Jun-He Technology Ltd. ERP POS - Stored XSS-2
- CVE-2021-30170 Jun-He Technology Ltd. ERP POS - Stored XSS-1
- CVE-2021-3017 Information disclosure in intelbras:win 300 firmware
- CVE-2021-30169 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2
- CVE-2021-30168 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1
- CVE-2021-30167 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication
- CVE-2021-30166 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection
- CVE-2021-30165 EDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password
- CVE-2021-30164 Missing authorization in debian:debian linux
- CVE-2021-30163 Information disclosure in debian:debian linux
- CVE-2021-30162 Missing authorization in google:android
- CVE-2021-30161 Security feature bypass in google:android
- CVE-2021-30159 Race condition in debian:debian linux
- CVE-2021-30158 Security feature bypass in debian:debian linux
- CVE-2021-30157 Cross-site scripting in debian:debian linux
- CVE-2021-30156 Information disclosure in fedoraproject:fedora
- CVE-2021-30155 Missing authorization in debian:debian linux
- CVE-2021-30154 Cross-site scripting in debian:debian linux
- CVE-2021-30153 Information disclosure in mediawiki:mediawiki
- CVE-2021-30152 Privilege escalation in debian:debian linux
- CVE-2021-30151 Cross-site Scripting in Sidekiq
- CVE-2021-30150 Cross-site scripting in ocproducts:composr
- CVE-2021-30149 File upload in ocproducts:composr
- CVE-2021-30147 Cross-site request forgery in dmasoftlab:radius manager
- CVE-2021-30146 Cross-site scripting in seafile:seafile
- CVE-2021-30145 Memory corruption in mpv:mpv
- CVE-2021-30144 Missing authorization in glpi-project:dashboard
- CVE-2021-30141 Denial of service in friendica:friendica
- CVE-2021-30140 Cross-site scripting in liquidfiles:liquidfiles
- CVE-2021-3014 Cross-site scripting in mikrotik:routeros
- CVE-2021-30139 Memory corruption in alpinelinux:apk-tools
- CVE-2021-30137 XML external entity in axiossystems:assyst
- CVE-2021-30134 php-mod/curl allows Cross-site Scripting
- CVE-2021-30133 Cross-site scripting in cloverdx:cloverdx
- CVE-2021-30132 Privilege escalation in cloudera:cloudera manager
- CVE-2021-30130 Improper Certificate Validation in phpseclib
- CVE-2021-3013 OS command injection in ripgrep
- CVE-2021-30129 DoS/OOM leak vulnerability in Apache Mina SSHD Server
- CVE-2021-30128 Unsafe deserialization in Apache OFBiz
- CVE-2021-30127 Misconfiguration in terra-master:f2-210 firmware
- CVE-2021-30126 Information disclosure in lightmeter:controlcenter
- CVE-2021-30125 Cross-site scripting in jamf:jamf
- CVE-2021-30124 Code injection in vscode-phpmd project:vscode-phpmd
- CVE-2021-30123 Memory corruption in ffmpeg:ffmpeg
- CVE-2021-30121 (Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6
- CVE-2021-30120 2FA bypass in Kaseya VSA <= v9.5.6
- CVE-2021-3012 Cross-site scripting in esri:arcgis enterprise
- CVE-2021-30119 Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6
- CVE-2021-30118 Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5
- CVE-2021-30117 Authenticated SQL injection in Kaseya VSA < v9.5.6
- CVE-2021-30116 Kaseya Virtual System/Server Administrator (VSA) Information Disclosure
- CVE-2021-30114 Cross-site request forgery in web-school:enterprise resource planning
- CVE-2021-30113 Cross-site scripting in web-school:enterprise resource planning
- CVE-2021-30112 Cross-site request forgery in web-school:enterprise resource planning
- CVE-2021-30111 Cross-site scripting in web-school:enterprise resource planning
- CVE-2021-30110 Other in greyware:domain time ii
- CVE-2021-3011 Information disclosure in ftsafe:k13
- CVE-2021-30109 Cross-site Scripting in Froala Editor
- CVE-2021-30108 Server-Side Request Forgery in Feehi CMS
- CVE-2021-3010 Cross-site scripting in opentext:content server
- CVE-2021-30086 Cross-site scripting in kindsoft:kindeditor
- CVE-2021-30083 Cross-site scripting in webfairy:mediat
- CVE-2021-30082 Cross-site scripting in gris cms project:gris cms
- CVE-2021-30081 SQL injection in emlog:emlog
- CVE-2021-30080 Access control bypass in Beego
- CVE-2021-30074 Docsify vulnerable to cross-site scripting due to mishandled encoding
- CVE-2021-30072 Memory corruption in dlink:dir-878 firmware
- CVE-2021-30071 Cross-site scripting in hestiacp:control panel
- CVE-2021-30070 Command injection in hestiacp:hestiacp
- CVE-2021-3007 Remote code execution in zendframework and laminas-http
- CVE-2021-30066 Security feature bypass in belden:eagle 20 tofino 943 987-501-tx\/tx firmware
- CVE-2021-30065 Security feature bypass in belden:eagle 20 tofino 943 987-501-tx\/tx firmware
- CVE-2021-30064 Hardcoded credentials in belden:eagle 20 tofino 943 987-501-tx\/tx firmware
- CVE-2021-30063 Denial of service in belden:eagle 20 tofino 943 987-501-tx\/tx firmware
- CVE-2021-30062 Security feature bypass in belden:eagle 20 tofino 943 987-501-tx\/tx firmware
- CVE-2021-30061 Code injection in belden:eagle 20 tofino 943 987-501-tx\/tx firmware
- CVE-2021-3006 Missing authorization in seal finance project:seal finance
- CVE-2021-30058 Cross-site scripting in eng:knowage
- CVE-2021-30057 Cross-site scripting in eng:knowage
- CVE-2021-30056 Cross-site scripting in eng:knowage
- CVE-2021-30055 SQL injection in eng:knowage
- CVE-2021-3005 Information disclosure in mk-auth:mk-auth
- CVE-2021-30049 Cross-site scripting in sysaid:sysaid
- CVE-2021-30048 Path traversal in novel boutique house-plus project:novel boutique house-plus
- CVE-2021-30047 Denial of service in vsftpd project:vsftpd
- CVE-2021-30046 Denial of service in vigra computer vision library project:vigra computer vision library