Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 188 of 273.
- CVE-2021-27902 Craft CMS Cross-site Scripting Vulnerability
- CVE-2021-27901 Security feature bypass in google:android
- CVE-2021-27900 Missing authorization in proofpoint:insider threat management
- CVE-2021-27899 Security feature bypass in proofpoint:insider threat management
- CVE-2021-27893 Privilege escalation in ssh:tectia client
- CVE-2021-27892 Privilege escalation in ssh:tectia client
- CVE-2021-27891 Weak cryptography in ssh:tectia client
- CVE-2021-27890 SQL injection in mybb:mybb
- CVE-2021-27889 Cross-site scripting in mybb:mybb
- CVE-2021-27888 Cross-site scripting in zend:zendto
- CVE-2021-27887 Stored XSS vulnerability in Ellipse APM
- CVE-2021-27886 Command injection in docker dashboard project:docker dashboard
- CVE-2021-27885 Cross-site request forgery in e107:e107
- CVE-2021-27884 Weak JSON Web Token in yapi-vendor
- CVE-2021-27878 Veritas Backup Exec Agent Command Execution
- CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication
- CVE-2021-27876 Veritas Backup Exec Agent File Access
- CVE-2021-27862 Security feature bypass in 802.2
- CVE-2021-27861 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths
- CVE-2021-27860 FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
- CVE-2021-27859 Missing authorization vulnerability in FatPipe software
- CVE-2021-27858 Missing authorization vulnerability in FatPipe software
- CVE-2021-27857 FatPipe software allows unauthenticated configuration download
- CVE-2021-27856 FatPipe software administrative account with no password
- CVE-2021-27855 FatPipe software allows privilege escalation
- CVE-2021-27854 L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation
- CVE-2021-27853 L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers
- CVE-2021-27852 Checkbox Survey Deserialization of Untrusted Data
- CVE-2021-27851 Local privilege escalation in GNU Guix via guix-daemon and '--keep-failed'
- CVE-2021-27850 Bypass of the fix for CVE-2019-0195
- CVE-2021-27847 Denial of service in libvips:libvips
- CVE-2021-27845 Denial of service in jasper project:jasper
- CVE-2021-27839 Code injection in bigprof:online invoicing system
- CVE-2021-27836 Null dereference in fedoraproject:fedora
- CVE-2021-27828 SQL injection in in4velocity:in4suite erp
- CVE-2021-27825 Path traversal in mercurycom:mac1200r firmware
- CVE-2021-27823 Information disclosure in mediateknet:netwave system
- CVE-2021-27822 Cross-site scripting in phpgurukul:vehicle parking management system
- CVE-2021-27821 Cross-site scripting in openwrt:luci
- CVE-2021-27817 ShopXO RCE Vulnerability
- CVE-2021-27815 Null dereference in fedoraproject:fedora
- CVE-2021-27811 Code injection in qibosoft:qibosoft
- CVE-2021-27807 A carefully crafted PDF file can trigger an infinite loop while loading the file
- CVE-2021-27804 Memory corruption in libjxl project:libjxl
- CVE-2021-27803 Memory corruption in debian:debian linux
- CVE-2021-27799 Memory corruption in zint:barcode generator
- CVE-2021-27798 privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x
- CVE-2021-27797 Hardcoded credentials in Brocade Fabric OS
- CVE-2021-27796 Privilege escalation in Brocade Fabric OS
- CVE-2021-27795 License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,
- CVE-2021-27794 Auth bypass in Brocade Fabric OS
- CVE-2021-27793 Auth bypass in Brocade Fabric OS
- CVE-2021-27792 Denial of service in Brocade Fabric OS
- CVE-2021-27791 Auth bypass in Brocade Fabric OS
- CVE-2021-27790 Memory corruption in Brocade Fabric OS
- CVE-2021-27789 Information disclosure in Brocade Fabric OS
- CVE-2021-27788 HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability
- CVE-2021-27786 HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted
- CVE-2021-27785 HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)
- CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key
- CVE-2021-27783 HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure
- CVE-2021-27782 HCL BigFix Mobile / Modern Client Management Server passwords are susceptible to a brute-force attack
- CVE-2021-27781 HCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting
- CVE-2021-27780 HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
- CVE-2021-27779 A Security Misconfiguration vulnerability affects HCL VersionVault Express
- CVE-2021-27778 Cross-site scripting in HCL Traveler
- CVE-2021-27777 HCL Unica Platform is vulnerable to XML External Entity (XXE) injection
- CVE-2021-27774 An injection vulnerability affects HCL Digital Experience
- CVE-2021-27773 HCL Sametime is vulnerable to clickjacking
- CVE-2021-27772 HCL Sametime is vulnerable to an information disclosure
- CVE-2021-27771 HCL Sametime is susceptible a file transfer service vulnerability
- CVE-2021-27770 HCL Sametime is vulnerable to arbitrary HTTP requests
- CVE-2021-27769 HCL Sametime is vulnerable to an information disclosure
- CVE-2021-27768 An SSL certificate host verification vulnerability affects HCL Verse for Android
- CVE-2021-27767 HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability
- CVE-2021-27766 HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability
- CVE-2021-27765 HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability
- CVE-2021-27764 HCL BigFix WebUI Cookie missing attributes
- CVE-2021-27762 HCL BigFix Platform is affected by misconfigured security-related HTTP headers
- CVE-2021-27761 HCL BigFix Platform is affected by weak web transport security
- CVE-2021-27760 HCL Notes 11.0 - 11.0.1 FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restart
- CVE-2021-27759 Cross-site request forgery in HCL BigFix Inventory
- CVE-2021-27758 Cross-site request forgery in HCL BigFix Inventory
- CVE-2021-27757 Information disclosure in "BigFix Insights"
- CVE-2021-27756 Weak cryptography in "BigFix Compliance Server"
- CVE-2021-27755 Path traversal in "HCL Sametime"
- CVE-2021-27753 Path traversal in "HCL Sametime"
- CVE-2021-27751 HCL Commerce is affected by an Insufficient Session Expiration vulnerability.
- CVE-2021-27746 Cross-site scripting in "HCL Connections"
- CVE-2021-27741 XML external entity in Commerce
- CVE-2021-27738 Improper Access Control to Streaming Coordinator & SSRF
- CVE-2021-27737 Denial of service in Apache Traffic Server
- CVE-2021-27736 XML external entity in fusionauth:saml v2
- CVE-2021-27734 Auth bypass in belden:hirschmann hios
- CVE-2021-27733 Cross-site scripting in jetbrains:youtrack
- CVE-2021-27731 Cross-site scripting in accellion:fta
- CVE-2021-27730 Command injection in accellion:fta
- CVE-2021-27722 Memory corruption in nsasoft:spotauditor
- CVE-2021-27715 Auth bypass in mofinetwork:mofi4500-4gxelte-v2 firmware
- CVE-2021-27710 Command injection in totolink:a720r firmware