Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 179 of 273.
- CVE-2021-29421 Improper Restriction of XML External Entity Reference in pikepdf
- CVE-2021-29418 Security feature bypass in netmask project:netmask
- CVE-2021-29417 gitjacker arbitrary code execution
- CVE-2021-29416 Server-side request forgery in portswigger:burp suite
- CVE-2021-29415 Weak cryptography in nordicsemi:nrf52840 firmware
- CVE-2021-29414 Security feature bypass in st:stm32cubel4 firmware
- CVE-2021-29400 Cross-site request forgery in netexplorer:my smtp contact
- CVE-2021-29399 Cross-site scripting in xmbforum2:xmb
- CVE-2021-29398 Path traversal in globalnorthstar:northstar club management
- CVE-2021-29397 Information disclosure in globalnorthstar:northstar club management
- CVE-2021-29396 Missing authorization in globalnorthstar:northstar club management
- CVE-2021-29395 Path traversal in globalnorthstar:northstar club management
- CVE-2021-29394 Missing authorization in globalnorthstar:northstar club management
- CVE-2021-29393 Command injection in globalnorthstar:northstar club management
- CVE-2021-29390 Memory corruption in fedoraproject:fedora
- CVE-2021-29388 Cross-site scripting in budget management system project:budget management system
- CVE-2021-29387 Cross-site scripting in equipment inventory system project:equipment inventory system
- CVE-2021-29379 Command injection in dlink:dir-802 firmware
- CVE-2021-29378 SQL injection in pearadmin:pear admin think
- CVE-2021-29377 File upload in pearadmin:pearadmin think
- CVE-2021-29376 Denial of service in debian:debian linux
- CVE-2021-29370 Cross-site scripting in cheetah browser project:cheetah browser
- CVE-2021-29369 Code injection in @rkesters/gnuplot
- CVE-2021-29368 Auth bypass in cuppacms:cuppacms
- CVE-2021-29367 Memory corruption in irfanview:irfanview
- CVE-2021-29366 Memory corruption in irfanview:irfanview
- CVE-2021-29365 Denial of service in irfanview:irfanview
- CVE-2021-29364 Memory corruption in irfanview:irfanview
- CVE-2021-29363 Memory corruption in irfanview:irfanview
- CVE-2021-29362 Memory corruption in irfanview:irfanview
- CVE-2021-29361 Memory corruption in irfanview:irfanview
- CVE-2021-29360 Memory corruption in irfanview:irfanview
- CVE-2021-29358 Memory corruption in irfanview:irfanview
- CVE-2021-29357 Server-side request forgery in outsystems:lifetime management console
- CVE-2021-29350 SQL injection in shipment 100-design material download system project:shipment 100-design material download system
- CVE-2021-29349 Cross-site request forgery in mahara:mahara
- CVE-2021-29343 SQL injection in ovidentia:ovidentia
- CVE-2021-29338 Integer overflow in debian:debian linux
- CVE-2021-29337 Privilege escalation in msi:dragon center
- CVE-2021-29334 Cross-site request forgery in jizhicms:jizhicms
- CVE-2021-29329 Memory corruption in moddable:moddable
- CVE-2021-29328 Memory corruption in moddable:moddable
- CVE-2021-29327 Memory corruption in moddable:moddable
- CVE-2021-29326 Memory corruption in moddable:moddable
- CVE-2021-29325 Memory corruption in moddable:moddable
- CVE-2021-29324 Memory corruption in moddable:moddable
- CVE-2021-29323 Memory corruption in moddable:moddable
- CVE-2021-29313 Cross-site scripting in seacms:seacms
- CVE-2021-29302 Memory corruption in tp-link:tl-wr802n firmware
- CVE-2021-29300 Command Injection in @ronomon/opened
- CVE-2021-29298 Denial of service in emerson:proficy machine edition
- CVE-2021-29297 Memory corruption in emerson:proficy machine edition
- CVE-2021-29296 Null dereference in dlink:dir-825 firmware
- CVE-2021-29295 Null dereference in dlink:dsp-w215 firmware
- CVE-2021-29294 Null dereference in dlink:dsl-2740r firmware
- CVE-2021-29281 File upload in gfi:archiver
- CVE-2021-29280 Memory corruption in tp-link:tl-wr840n firmware
- CVE-2021-29279 Integer overflow in gpac:gpac
- CVE-2021-29274 Cross-site scripting in redmine:redmine
- CVE-2021-29272 Cross-site scripting in bluemonday
- CVE-2021-29271 Cross-site scripting in remark42:remark42
- CVE-2021-29267 Cross-site scripting in sherlockim:sherlockim
- CVE-2021-29266 Use after free in linux:linux kernel
- CVE-2021-29265 Race condition in debian:debian linux
- CVE-2021-29264 Denial of service in debian:debian linux
- CVE-2021-29263 Code injection in jetbrains:intellij idea
- CVE-2021-29262 Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings
- CVE-2021-29261 Code injection in svelte:svelte
- CVE-2021-29258 Denial of service in envoyproxy:envoy
- CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free
- CVE-2021-29255 Information disclosure in microseven:mym71080i-b firmware
- CVE-2021-29253 Information disclosure in rsa:archer
- CVE-2021-29252 Cross-site scripting in rsa:archer
- CVE-2021-29251 Business logic in btcpayserver:btcpay server
- CVE-2021-29250 Cross-site scripting in btcpayserver:btcpay server
- CVE-2021-29249 Information disclosure in btcpayserver:btcpay server
- CVE-2021-29248 Information disclosure in btcpayserver:btcpay server
- CVE-2021-29247 Misconfiguration in btcpayserver:btcpay server
- CVE-2021-29246 Path traversal in btcpayserver:btcpay server
- CVE-2021-29245 Weak cryptography in btcpayserver:btcpay server
- CVE-2021-29243 Cross-site scripting in cloudera:cloudera manager
- CVE-2021-29242 Other in codesys:control for beaglebone sl
- CVE-2021-29241 Null dereference in codesys:control for beaglebone sl
- CVE-2021-29240 Security feature bypass in codesys:development system
- CVE-2021-29239 Security feature bypass in codesys:development system
- CVE-2021-29238 Cross-site request forgery in codesys:automation server
- CVE-2021-29221 Privilege escalation in Erlang/OTP
- CVE-2021-29220 Memory corruption in iLO Amplifier Pack
- CVE-2021-29219 Memory corruption in HPE FlexNetwork 5130 EI Switch Series
- CVE-2021-29218 Privilege escalation in HPE Agentless Management
- CVE-2021-29217 Open redirect in HPE OneView Global Dashboard
- CVE-2021-29216 Cross-site scripting in HPE OneView Global Dashboard
- CVE-2021-29215 Security feature bypass in HPE Ezmeral Data Fabric
- CVE-2021-29214 Code injection in HPE StoreServ Management Console (SSMC); HPE 3PAR StoreServ Management and Core Software Media
- CVE-2021-29213 Security feature bypass in HPE ProLiant ML30 Gen10 Server; HPE ProLiant DL20 Gen10 Server; HPE ProLiant MicroServer Gen10 Plus
- CVE-2021-29212 Path traversal in iLO Amplifier Pack
- CVE-2021-29211 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29210 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29209 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29208 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers