Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 180 of 273.
- CVE-2021-29207 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29206 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29205 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29204 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29203 Auth bypass in HPE Edgeline Infrastructure Management Software
- CVE-2021-29202 Memory corruption in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29201 Cross-site scripting in HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- CVE-2021-29200 RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI
- CVE-2021-29159 Cross-site scripting in sonatype:nexus repository manager
- CVE-2021-29158 Missing authorization in sonatype:nexus repository manager
- CVE-2021-29157 Path traversal in dovecot:dovecot
- CVE-2021-29156 Other in forgerock:openam
- CVE-2021-29155 Information disclosure in debian:debian linux
- CVE-2021-29154 Memory corruption in debian:debian linux
- CVE-2021-29152 Denial of service in Aruba ClearPass Policy Manager
- CVE-2021-29151 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2021-29150 Deserialization in Aruba ClearPass Policy Manager
- CVE-2021-29149 Security feature bypass in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series
- CVE-2021-29148 Cross-site scripting in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series
- CVE-2021-29147 Command injection in Aruba ClearPass Policy Manager
- CVE-2021-29146 Cross-site scripting in Aruba ClearPass Policy Manager
- CVE-2021-29145 Server-side request forgery in Aruba ClearPass Policy Manager
- CVE-2021-29144 Information disclosure in Aruba ClearPass Policy Manager
- CVE-2021-29143 Command injection in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series
- CVE-2021-29142 Cross-site scripting in Aruba ClearPass Policy Manager
- CVE-2021-29141 Information disclosure in Aruba ClearPass Policy Manager
- CVE-2021-29140 XML external entity in Aruba ClearPass Policy Manager
- CVE-2021-29139 Cross-site scripting in Aruba ClearPass Policy Manager
- CVE-2021-29138 Information disclosure in Aruba ClearPass Policy Manager
- CVE-2021-29137 Open redirect in Aruba AirWave Management Platform
- CVE-2021-29136 Improper input validation in umoci
- CVE-2021-29134 Path Traversal in Gitea
- CVE-2021-29133 Path traversal in haserl project:haserl
- CVE-2021-29118 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-29117 arcreader use-after-free
- CVE-2021-29116 BUG-000142180 Hosted feature services vulnerable to stored XSS
- CVE-2021-29115 An information disclosure vulnerability
- CVE-2021-29114 SQL injection vulnerability in ArcGIS Server
- CVE-2021-29113 Remote file inclusion vulnerability in ArcGIS Server help documentation
- CVE-2021-29112 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-29110 Cross-site scripting in Portal for ArcGIS
- CVE-2021-29109 A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.
- CVE-2021-29108 Auth bypass in Portal for ArcGIS
- CVE-2021-29107 There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.
- CVE-2021-29106 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.
- CVE-2021-29105 Cross-site scripting in ArcGIS Server
- CVE-2021-29104 There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.
- CVE-2021-29103 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.
- CVE-2021-29102 There is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.
- CVE-2021-29101 ArcGIS GeoEvent Server has a Directory Traversal security vulnerability.
- CVE-2021-29100 ArcGIS Earth has a File Parsing Directory Traversal Vulnerability
- CVE-2021-29099 There is a SQL injection vulnerability in ArcGIS Server
- CVE-2021-29098 ArcGIS general raster security update: uninitialized pointer
- CVE-2021-29097 ArcGIS general raster security update: buffer overflow
- CVE-2021-29096 ArcGIS general raster security update: use-after-free
- CVE-2021-29095 ArcGIS Server image service and raster analytics security update: uninitialized pointer
- CVE-2021-29094 ArcGIS Server image service and raster analytics security update: buffer overflow
- CVE-2021-29093 ArcGIS Server image service and raster analytics security update: use-after-free
- CVE-2021-29092 File upload in Synology Photo Station
- CVE-2021-29091 Path traversal in Synology Photo Station
- CVE-2021-29090 SQL injection in Synology Photo Station
- CVE-2021-29089 SQL injection in Synology Photo Station
- CVE-2021-29088 Path traversal in Synology DiskStation Manager (DSM)
- CVE-2021-29087 Path traversal in DiskStation Manager (DSM)
- CVE-2021-29086 Information disclosure in DiskStation Manager (DSM)
- CVE-2021-29085 Path traversal in DiskStation Manager (DSM)
- CVE-2021-29084 Code injection in DiskStation Manager (DSM)
- CVE-2021-29083 Command injection in Synology DiskStation Manager (DSM)
- CVE-2021-29082 Information disclosure in netgear:rbk752 firmware
- CVE-2021-29081 Memory corruption in netgear:rbk752 firmware
- CVE-2021-29080 Auth bypass in netgear:cbr40 firmware
- CVE-2021-29079 Command injection in netgear:rbk852 firmware
- CVE-2021-29078 Command injection in netgear:rbk752 firmware
- CVE-2021-29077 Command injection in netgear:rbk752 firmware
- CVE-2021-29076 Command injection in netgear:rbk852 firmware
- CVE-2021-29075 Memory corruption in netgear:rbk752 firmware
- CVE-2021-29074 Memory corruption in netgear:rbk752 firmware
- CVE-2021-29073 Memory corruption in netgear:mk62 firmware
- CVE-2021-29072 Command injection in netgear:rbk852 firmware
- CVE-2021-29071 Command injection in netgear:rbk852 firmware
- CVE-2021-29070 Command injection in netgear:rbk852 firmware
- CVE-2021-29069 Command injection in netgear:wnr2000v5 firmware
- CVE-2021-29068 Memory corruption in netgear:ac2100 firmware
- CVE-2021-29067 Auth bypass in netgear:rbk752 firmware
- CVE-2021-29066 Auth bypass in netgear:rbk852 firmware
- CVE-2021-29065 Auth bypass in netgear:rbr850 firmware
- CVE-2021-29063 ReDOS in Mpmath
- CVE-2021-29061 ReDOS in Vfsjfilechooser2
- CVE-2021-29060 Regular Expression Denial of Service (ReDOS)
- CVE-2021-29059 ReDOS in IS-SVG
- CVE-2021-29057 SUCHMOKUO node-worker-threads-pool denial of service Vulnerability
- CVE-2021-29056 Cross-site scripting in pixelimity:pixelimity
- CVE-2021-29055 Cross-site scripting in school file management system project:school file management system
- CVE-2021-29054 Cross-site request forgery in papoo:papoo
- CVE-2021-29053 Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections
- CVE-2021-29052 Liferay Portal and Liferay DXP Fails to Check Permissions
- CVE-2021-29051 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
- CVE-2021-29050 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page
- CVE-2021-29049 Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter
- CVE-2021-29048 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page