Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 200 of 273.
- CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read
- CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection
- CVE-2021-26083 Cross-site scripting in Jira Data Center
- CVE-2021-26082 Cross-site scripting in Jira Data Center
- CVE-2021-26081 Information disclosure in Jira Data Center
- CVE-2021-26080 Cross-site scripting in Jira Data Center
- CVE-2021-26079 Cross-site scripting in Jira Data Center
- CVE-2021-26078 Cross-site scripting in Jira Data Center
- CVE-2021-26077 Improper Authentication in Atlassian Connect Spring Boot
- CVE-2021-26076 Information disclosure in Jira Data Center
- CVE-2021-26075 Information disclosure in Jira Data Center
- CVE-2021-26074 Broken Authentication in Atlassian Connect Spring Boot
- CVE-2021-26073 Broken Authentication in Atlassian Connect Express
- CVE-2021-26072 Server-side request forgery in Confluence Data Center
- CVE-2021-26071 Cross-site request forgery in Jira Data Center
- CVE-2021-26070 Auth bypass in Jira Data Center
- CVE-2021-26069 Information disclosure in Jira Data Center
- CVE-2021-26068 Code injection in Jira Server for Slack
- CVE-2021-26067 Information disclosure in Bamboo
- CVE-2021-26040 [20210801] - Core - Insufficient access control for com_media deletion endpoint
- CVE-2021-26039 [20210705] - Core - XSS in com_media imagelist
- CVE-2021-26038 [20210704] - Core - Privilege escalation through com_installer
- CVE-2021-26037 [20210703] - Core - Lack of enforced session termination
- CVE-2021-26036 [20210702] - Core - DoS through usergroup table manipulation
- CVE-2021-26035 [20210701] - Core - XSS in JForm Rules field
- CVE-2021-26034 [20210503] - Core - CSRF in data download endpoints
- CVE-2021-26033 [20210502] - Core - CSRF in AJAX reordering endpoint
- CVE-2021-26032 [20210501] - Core - Adding HTML to the executable block list of MediaHelper::canUpload
- CVE-2021-26031 [20210402] - Core - Inadequate filters on module layout settings
- CVE-2021-26030 [20210401] - Core - Escape xss in logo parameter error pages
- CVE-2021-26029 [20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author field
- CVE-2021-26028 [20210308] - Core - Path Traversal within joomla/archive zip class
- CVE-2021-26027 [20210307] - Core - ACL violation within com_content frontend editing
- CVE-2021-26026 Memory corruption in acdsee:photo studio 2021
- CVE-2021-26025 Memory corruption in acdsee:photo studio 2021
- CVE-2021-26024 Missing authorization in nagios:favorites
- CVE-2021-26023 Cross-site scripting in nagios:favorites
- CVE-2021-25994 Userfrosting - Host-Header Injection Leads to Account Takeover
- CVE-2021-25993 Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor
- CVE-2021-25992 ifme - Insufficient Session Expiration
- CVE-2021-25991 ifme - Improper Access Control leads to admin deactivation
- CVE-2021-25990 ifme - Stored Cross-Site Scripting (XSS) in Contacts section
- CVE-2021-25989 ifme - Stored Cross-Site Scripting (XSS) in Groups section
- CVE-2021-25988 ifme - Stored Cross-Site Scripting (XSS) in Notifications section
- CVE-2021-25987 Hexo - Stored XSS
- CVE-2021-25986 Django-wiki - Stored Cross-Site Scripting (XSS) in Notifications Section
- CVE-2021-25985 FactorJS - Insufficient Session Expiration Leads to a Local Account Takeover
- CVE-2021-25984 FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality
- CVE-2021-25983 FactorJS - Reflected Cross-Site Scripting (XSS) in Tags and Categories Functionality
- CVE-2021-25982 FactorJS - Reflected Cross-Site Scripting (XSS) in Search Functionality
- CVE-2021-25981 Talkyard - Insufficient Session Expiration
- CVE-2021-25980 Talkyard - Host-Header Injection Leads to Account Takeover
- CVE-2021-25979 Apostrophe - Insufficient Session Expiration
- CVE-2021-25978 Apostrophe - XSS
- CVE-2021-25977 Piranha CMS - Stored XSS in Page Title
- CVE-2021-25976 Piranha CMS - Site-wide Cross-Site Request Forgery (CSRF)
- CVE-2021-25975 Publify - Stored Cross-Site Scripting (XSS) due to Unrestricted File Upload
- CVE-2021-25974 Publify - Stored Cross-Site Scripting (XSS) in Editor
- CVE-2021-25973 Publify - Improper Authorization Leads to Guest Signup Restriction Bypass
- CVE-2021-25972 Camaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload Feature
- CVE-2021-25971 Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature
- CVE-2021-25970 Camaleon CMS - Insufficient Session Expiration after Password Change
- CVE-2021-25969 Camaleon CMS - Stored Cross-Site Scripting (XSS) in Comments
- CVE-2021-25968 OpenCMS - Stored Cross-Site Scripting (XSS) in Sitemap
- CVE-2021-25967 CKAN - Stored Cross-Site Scripting (XSS) via SVG File Upload
- CVE-2021-25966 Orchard Core CMS - Improper Session Termination after Password Change
- CVE-2021-25965 Calibre-web - Admin Account Takeover via Cross-Site Request Forgery (CSRF)
- CVE-2021-25964 Stored Cross-Site Scripting (XSS) in Calibre-web via Description Field in Metadata
- CVE-2021-25963 Shuup - Reflected XSS in Error Page
- CVE-2021-25962 Shuup - Formula Injection in Checkout Addresses
- CVE-2021-25961 SuiteCRM - Account Takeover in Password Reset Functionality
- CVE-2021-25960 SuiteCRM - CSV Injection in Accounts Module
- CVE-2021-25959 OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionality
- CVE-2021-25958 Generation of Error Message Containing Sensitive Information in Apache OFBiz
- CVE-2021-25957 Account Takeover in "Dolibarr" via Password Reset Functionality
- CVE-2021-25956 Improper User Access Control in "Dolibarr" Leads to Account Takeover
- CVE-2021-25955 Stored XSS in “Dolibarr” leads to privilege escalation
- CVE-2021-25954 Improper Access Control in “Dolibarr”
- CVE-2021-25953 Prototype Pollution in putil-merge
- CVE-2021-25952 Prototype polluation in just-safe-set
- CVE-2021-25951 XML2Dict XML Entity Expansion Vulnerability
- CVE-2021-25949 set-getter Prototype Pollution Vulnerability
- CVE-2021-25948 Prototype Pollution
- CVE-2021-25947 Prototype pollution in nestie
- CVE-2021-25946 Prototype pollution in nconf-toml
- CVE-2021-25945 Prototype pollution vulnerability in js-extend
- CVE-2021-25944 deep-defaults vulnerable to prototype pollution
- CVE-2021-25943 Prototype pollution in 101
- CVE-2021-25941 Prototype Pollution in deep-override
- CVE-2021-25940 ArangoDB - Insufficient Session Expiration after Password Change
- CVE-2021-25939 ArangoDB - Blind SSRF when Downloading Foxx Service from URL
- CVE-2021-25938 Cross-site scripting in ArangoDB
- CVE-2021-25935 Cross-site scripting in OpenNMS
- CVE-2021-25934 OpenNMS Horizon vulnerable to XSS
- CVE-2021-25933 Cross-site Scripting in OpenNMS Horizon
- CVE-2021-25932 Cross-site scripting in OpenNMS
- CVE-2021-25931 Cross-Site Request Forgery in OpenNMS Horizon
- CVE-2021-25930 Cross-Site Request Forgery in OpenNMS Horizon
- CVE-2021-25929 Cross-site Scripting in OpenNMS Horizon
- CVE-2021-25928 Prototype pollution in safe-obj