Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 186 of 273.
- CVE-2021-28208 ASUS BMC's firmware: path traversal - Get video file function
- CVE-2021-28207 ASUS BMC's firmware: path traversal - Get Help file function
- CVE-2021-28206 ASUS BMC's firmware: path traversal - Record video file function
- CVE-2021-28205 ASUS BMC's firmware: path traversal - Delete SOL video file function
- CVE-2021-28204 ASUS BMC's firmware: command injection - Modify user’s information function
- CVE-2021-28203 ASUS BMC's firmware: command injection - Web Set Media Image function
- CVE-2021-28202 ASUS BMC's firmware: buffer overflow - Service configuration-2 function
- CVE-2021-28201 ASUS BMC's firmware: buffer overflow - Service configuration-1 function
- CVE-2021-28200 ASUS BMC's firmware: buffer overflow - CD media configuration function
- CVE-2021-28199 ASUS BMC's firmware: buffer overflow - Modify user’s information function
- CVE-2021-28198 ASUS BMC's firmware: buffer overflow - Firmware protocol configuration
- CVE-2021-28197 ASUS BMC's firmware: buffer overflow - Active Directory configuration function
- CVE-2021-28196 ASUS BMC's firmware: buffer overflow - Generate SSL certificate function
- CVE-2021-28195 ASUS BMC's firmware: buffer overflow - Radius configuration function
- CVE-2021-28194 ASUS BMC's firmware: buffer overflow - Remote image configuration setting
- CVE-2021-28193 ASUS BMC's firmware: buffer overflow - SMTP configuration function
- CVE-2021-28192 ASUS BMC's firmware: buffer overflow - Remote video storage function
- CVE-2021-28191 ASUS BMC's firmware: buffer overflow - Firmware update function
- CVE-2021-28190 ASUS BMC's firmware: buffer overflow - Generate new certificate function
- CVE-2021-28189 ASUS BMC's firmware: buffer overflow - SMTP configuration function
- CVE-2021-28188 ASUS BMC's firmware: buffer overflow - Modify user’s information function
- CVE-2021-28187 ASUS BMC's firmware: buffer overflow - Generate new SSL certificate
- CVE-2021-28186 ASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisition
- CVE-2021-28185 ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition
- CVE-2021-28184 ASUS BMC's firmware: buffer overflow - Active Directory configuration function
- CVE-2021-28183 ASUS BMC's firmware: buffer overflow - Web License configuration setting
- CVE-2021-28182 ASUS BMC's firmware: buffer overflow - Web Service configuration function
- CVE-2021-28181 ASUS BMC's firmware: buffer overflow - Remote video configuration setting
- CVE-2021-28180 ASUS BMC's firmware: buffer overflow - Audit log configuration setting
- CVE-2021-28179 ASUS BMC's firmware: buffer overflow - Media support configuration setting
- CVE-2021-28178 ASUS BMC's firmware: buffer overflow - UEFI configuration function
- CVE-2021-28177 ASUS BMC's firmware: buffer overflow - LDAP configuration function
- CVE-2021-28176 ASUS BMC's firmware: buffer overflow - DNS configuration function
- CVE-2021-28175 ASUS BMC's firmware: buffer overflow - Radius configuration function
- CVE-2021-28174 Mitake Smart Stock Selection System - Broken Authentication
- CVE-2021-28173 Vangene deltaFlow E-platform - Arbitrary File Upload
- CVE-2021-28172 Vangene deltaFlow E-platform - Path Traversal
- CVE-2021-28171 Vangene deltaFlow E-platform - Broken Authentication
- CVE-2021-28170 Improper Input Validation in Jakarta Expression Language
- CVE-2021-28169 Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability
- CVE-2021-28168 Local information disclosure via system temporary directory
- CVE-2021-28167 Information disclosure in Eclipse OpenJ9
- CVE-2021-28166 Null dereference in Eclipse Mosquitto
- CVE-2021-28165 Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
- CVE-2021-28164 Authorization Before Parsing and Canonicalization in jetty
- CVE-2021-28163 Directory exposure in jetty
- CVE-2021-28162 Command Injection in @theia/messages
- CVE-2021-28161 Improper Neutralization of Input in Theia console
- CVE-2021-28160 Cross-site scripting in acexy wireless-n wifi repeater project:acexy wireless-n wifi repeater firmware
- CVE-2021-28157 SQL injection in devolutions:devolutions server
- CVE-2021-28156 Security feature bypass in hashicorp:consul
- CVE-2021-28155 Denial of service in jbl:tune500bt firmware
- CVE-2021-28154 Missing authorization in camunda:modeler
- CVE-2021-28153 Other in broadcom:brocade fabric operating system firmware
- CVE-2021-28152 Hardcoded credentials in hongdian:h8922 firmware
- CVE-2021-28151 Command injection in hongdian:h8922 firmware
- CVE-2021-28150 Missing authorization in hongdian:h8922 firmware
- CVE-2021-28149 Path traversal in hongdian:h8922 firmware
- CVE-2021-28148 Denial of service in grafana:grafana
- CVE-2021-28147 Missing authorization in grafana:grafana
- CVE-2021-28146 Missing authorization in grafana:grafana
- CVE-2021-28145 Concrete CMS Cross-site Scripting via Survey Blocks
- CVE-2021-28144 Command injection in dlink:dir-3060 firmware
- CVE-2021-28143 Command injection in dlink:dir-841 firmware
- CVE-2021-28142 SQL injection in citsmart:citsmart
- CVE-2021-28141 Missing authorization in progress:telerik ui for asp.net ajax
- CVE-2021-28139 Memory corruption in espressif:esp-idf
- CVE-2021-28136 Memory corruption in espressif:esp-idf
- CVE-2021-28135 Denial of service in espressif:esp-idf
- CVE-2021-28134 Code injection in clipper project:clipper
- CVE-2021-28133 Information disclosure in zoom:zoom
- CVE-2021-28132 File upload in lucysecurity:security awareness
- CVE-2021-28131 Impala logs contain secrets
- CVE-2021-28130 Security feature bypass in drweb:security space
- CVE-2021-28129 DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid
- CVE-2021-28128 Weak Password Recovery Mechanism for Forgotten Password in Strapi
- CVE-2021-28127 Auth bypass in stormshield:stormshield network security
- CVE-2021-28126 Cross-site scripting in compassplus:tranzware e-commerce payment gateway
- CVE-2021-28125 Apache Superset Open Redirect
- CVE-2021-28124 Auth bypass in cohesity:cohesity dataplatform
- CVE-2021-28123 Hardcoded credentials in cohesity:cohesity dataplatform
- CVE-2021-28122 Missing authorization in open5gs:open5gs
- CVE-2021-28121 Other in virtual robots.txt project:virtual robots.txt
- CVE-2021-28119 Code injection in twinkletray:twinkle tray
- CVE-2021-28117 Other in kde:discover
- CVE-2021-28116 Memory corruption in debian:debian linux
- CVE-2021-28115 Cross-site scripting in ougc feedback project:ougc feedback
- CVE-2021-28114 Cross-site Scripting in Froala WYSIWYG Editor
- CVE-2021-28113 Command injection in okta:access gateway
- CVE-2021-28112 Other in draeger:x-dock firmware
- CVE-2021-28111 Hardcoded credentials in draeger:x-dock firmware
- CVE-2021-28110 XML external entity in compassplus:tranzware e-commerce payment gateway
- CVE-2021-28109 Cross-site scripting in compassplus:tranzware fimi
- CVE-2021-28100 Netflix/Priam: Temporary Directory Information Disclosure
- CVE-2021-28099 Insecure temporary file in Netflix OSS Hollow
- CVE-2021-28098 Privilege escalation in forescout:counteract
- CVE-2021-28096 Denial of service in stormshield:stormshield network security
- CVE-2021-28095 Weak cryptography in open-xchange:open-xchange documents
- CVE-2021-28094 Weak cryptography in open-xchange:open-xchange documents
- CVE-2021-28093 Weak cryptography in open-xchange:open-xchange documents