Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 187 of 273.
- CVE-2021-28092 Regular Expression Denial of Service (ReDoS)
- CVE-2021-28091 Security feature bypass in debian:debian linux
- CVE-2021-28090 Denial of service in fedoraproject:fedora
- CVE-2021-28089 Denial of service in fedoraproject:fedora
- CVE-2021-28088 Cross-site scripting (XSS)
- CVE-2021-28079 Cross-site scripting in jamovi:jamovi
- CVE-2021-28075 Path traversal in ikuai8:ikuaios
- CVE-2021-28070 Cross-site request forgery in popojicms:popojicms
- CVE-2021-28060 Server-side request forgery in group-office:group office
- CVE-2021-28055 Predictable CSRF tokens in centreon/centreon
- CVE-2021-28054 Cross-site scripting in centreon:centreon
- CVE-2021-28053 SQL injection in centreon:centreon
- CVE-2021-28052 Hitachi Content Platform Information Disclosure Vulnerability
- CVE-2021-28048 Misconfiguration in devolutions:devolutions server
- CVE-2021-28047 Cross-site scripting in devolutions:remote desktop manager
- CVE-2021-28042 Path traversal in deutschepost:mailoptimizer
- CVE-2021-28041 Memory corruption in fedoraproject:fedora
- CVE-2021-28040 Denial of service in ossec:ossec
- CVE-2021-28039 Memory corruption in linux:linux kernel
- CVE-2021-28038 Denial of service in debian:debian linux
- CVE-2021-28037 Data race in internment
- CVE-2021-28036 quinn invalidly assumes the memory layout of std::net::SocketAddr
- CVE-2021-28035 Drop of uninitialized memory in stack_dst
- CVE-2021-28034 Double free in stack_dst
- CVE-2021-28033 Deserializing an array can free uninitialized memory in byte_struct
- CVE-2021-28032 Use after free in nano_arena
- CVE-2021-28031 move_elements can double-free objects on panic
- CVE-2021-28030 Use of Uninitialized Resource in truetype
- CVE-2021-28029 Uninitialized memory access in toodee
- CVE-2021-28028 Double free in toodee
- CVE-2021-28027 Loading a bgzip block can write out of bounds if size overflows.
- CVE-2021-28026 Memory corruption in jpeg:jpeg-xl
- CVE-2021-28025 Integer overflow in qt:qt
- CVE-2021-28024 Auth bypass in servicetonic:servicetonic
- CVE-2021-28023 File upload in servicetonic:servicetonic
- CVE-2021-28022 SQL injection in servicetonic:servicetonic
- CVE-2021-28021 Memory corruption in debian:debian linux
- CVE-2021-28007 Cross-site scripting in web based quiz system project:web based quiz system
- CVE-2021-28006 Cross-site scripting in web based quiz system project:web based quiz system
- CVE-2021-28002 Cross-site scripting in textpattern:textpattern
- CVE-2021-28001 Cross-site scripting in textpattern:textpattern
- CVE-2021-28000 Cross-site scripting in local services search engine management system project:local services search engine management system
- CVE-2021-27999 SQL injection in local services search engine management system project:local services search engine management system
- CVE-2021-27990 Auth bypass in appspace:appspace
- CVE-2021-27989 Cross-site scripting in appspace:appspace
- CVE-2021-27984 File upload in pluck-cms:pluck
- CVE-2021-27983 Code injection in max-3000:maxsite cms
- CVE-2021-27973 SQL injection in piwigo:piwigo
- CVE-2021-27971 Other in alpsalpine:touchpad driver
- CVE-2021-27969 Cross-site scripting in boonex:dolphin
- CVE-2021-27965 Memory corruption in msi:dragon center
- CVE-2021-27964 File upload in sfcyazilim:sonlogger
- CVE-2021-27963 Missing authorization in sfcyazilim:sonlogger
- CVE-2021-27962 Missing authorization in grafana:grafana
- CVE-2021-27961 evesys 7.1 (2152) through 8.0 (2202) allows Reflected XSS via the indexeva.php action parameter.
- CVE-2021-27956 Cross-site scripting in zohocorp:manageengine adselfservice plus
- CVE-2021-27954 Memory corruption in ecobee:ecobee3 lite firmware
- CVE-2021-27953 Null dereference in ecobee:ecobee3 lite firmware
- CVE-2021-27952 Hardcoded credentials in ecobee:ecobee3 lite firmware
- CVE-2021-27950 SQL injection in sitasoftware:azurcms
- CVE-2021-27949 Cross-site scripting in mybb:mybb
- CVE-2021-27948 SQL injection in mybb:mybb
- CVE-2021-27947 SQL injection in mybb:mybb
- CVE-2021-27946 SQL injection in mybb:mybb
- CVE-2021-27945 Cross-site scripting in squirro:squirro
- CVE-2021-27944 Missing authorization in vizio:e50x-e1 firmware
- CVE-2021-27943 Auth bypass in vizio:e50x-e1 firmware
- CVE-2021-27942 Code injection in vizio:e50x-e1 firmware
- CVE-2021-27941 Information disclosure in coolkit:ewelink
- CVE-2021-27940 openark/orchestrator cross-site scripting vulnerability
- CVE-2021-27938 XSS in CreateQueuedJobTask
- CVE-2021-27935 Weak cryptography in adguard:adguard home
- CVE-2021-27933 Cross-site scripting in pfsense:pfsense
- CVE-2021-27932 Misconfiguration in stormshield:ssl vpn client
- CVE-2021-27931 XML external entity in lumis:lumis experience platform
- CVE-2021-27930 Cross-site scripting in irislink:irisnext
- CVE-2021-27928 Code injection in debian:debian linux
- CVE-2021-27927 Cross-site request forgery in zabbix:zabbix
- CVE-2021-27925 Race condition in couchbase:couchbase server
- CVE-2021-27924 Information disclosure in couchbase:couchbase server
- CVE-2021-27923 Pillow Denial of Service by Uncontrolled Resource Consumption
- CVE-2021-27922 Pillow Uncontrolled Resource Consumption
- CVE-2021-27921 Pillow Denial of Service by Uncontrolled Resource Consumption
- CVE-2021-27919 Denial of service in fedoraproject:fedora
- CVE-2021-27918 Denial of service in golang:go
- CVE-2021-27917 XSS in contact tracking and page hits report
- CVE-2021-27916 Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)
- CVE-2021-27915 XSS Cross-site Scripting Stored (XSS) - Description field
- CVE-2021-27914 Cross-site scripting in Mautic
- CVE-2021-27913 Use of a Broken or Risky Cryptographic Algorithm
- CVE-2021-27912 XSS vulnerability on asset view
- CVE-2021-27911 XSS vulnerability on contacts view
- CVE-2021-27910 Stored XSS vulnerability on Bounce Management Callback
- CVE-2021-27909 XSS vulnerability on password reset page
- CVE-2021-27908 Mautic vulnerable to secret data exfiltration via symfony parameters
- CVE-2021-27907 Apache Superset stored XSS on Dashboard markdown
- CVE-2021-27906 A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
- CVE-2021-27905 SSRF vulnerability with the Replication handler
- CVE-2021-27904 Missing authorization in misp-project:misp
- CVE-2021-27903 Craft CMS Remote Code Injection