Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 202 of 273.
- CVE-2021-25748 Ingress-nginx `path` sanitization can be bypassed with newline character
- CVE-2021-25746 Ingress-nginx directive injection via annotations
- CVE-2021-25745 Ingress-nginx path can be pointed to service account token file
- CVE-2021-25743 ANSI escape characters in kubectl output are not being filtered
- CVE-2021-25742 Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces
- CVE-2021-25741 Symlink Exchange Can Allow Host Filesystem Access
- CVE-2021-25740 Holes in EndpointSlice Validation Enable Host Network Hijack
- CVE-2021-25738 Code exec via yaml parsing
- CVE-2021-25737 Holes in EndpointSlice Validation Enable Host Network Hijack
- CVE-2021-25736 Windows kube-proxy LoadBalancer contention
- CVE-2021-25735 Validating Admission Webhook does not observe some previous fields
- CVE-2021-25701 Denial of service in - PCoIP Software Client
- CVE-2021-25699 Privilege escalation in - PCoIP Standard Agent - PCoIP Graphics Agent - PCoIP Software Client
- CVE-2021-25698 Privilege escalation in - PCoIP Standard Agent - PCoIP Graphics Agent - PCoIP Software Client
- CVE-2021-25695 Privilege escalation in - PCoIP Agent for Windows
- CVE-2021-25694 Other in teradici:pcoip graphics agent
- CVE-2021-25693 Null dereference in teradici:pcoip agent
- CVE-2021-25692 Information disclosure in Teradici PCoIP Connection Manager and Security Gateway
- CVE-2021-25690 Null dereference in - PCoIP Soft Client for Windows - PCoIP Soft Client for Linux - PCoIP Soft Client for OSX
- CVE-2021-25689 Memory corruption in - PCoIP Soft Client for Windows - PCoIP Soft Client for Linux - PCoIP Soft Client for OSX
- CVE-2021-25688 Information disclosure in - PCoIP Standard Agent for Windows - PCoIP Standard Agent for Linux - PCoIP Graphics Agent for Windows - PCoIP Graphics Agent for Linux
- CVE-2021-25684 apport can be stalled by reading a FIFO
- CVE-2021-25683 apport improperly parses /proc/pid/stat
- CVE-2021-25682 apport improperly parses /proc/pid/status
- CVE-2021-25681 Other in adtran:personal phone manager
- CVE-2021-25680 Cross-site scripting in adtran:personal phone manager
- CVE-2021-25679 Cross-site scripting in adtran:personal phone manager
- CVE-2021-25678 Memory corruption in Solid Edge SE2020
- CVE-2021-25677 Weak cryptography in APOGEE PXC Compact (BACnet)
- CVE-2021-25676 Denial of service in RUGGEDCOM RM1224
- CVE-2021-25675 Denial of service in SIMATIC S7-PLCSIM V5.4
- CVE-2021-25674 Null dereference in SIMATIC S7-PLCSIM V5.4
- CVE-2021-25673 Denial of service in SIMATIC S7-PLCSIM V5.4
- CVE-2021-25672 Missing authorization in Mendix Forgot Password Appstore module
- CVE-2021-25671 Denial of service in RWG1.M12
- CVE-2021-25670 Memory corruption in Tecnomatix RobotExpert
- CVE-2021-25669 Memory corruption in SCALANCE X200-4P IRT
- CVE-2021-25668 Memory corruption in SCALANCE X200-4P IRT
- CVE-2021-25667 Memory corruption in RUGGEDCOM RM1224
- CVE-2021-25666 Denial of service in SCALANCE W780 and W740 (IEEE 802.11n) family
- CVE-2021-25665 Memory corruption in Simcenter STAR-CCM+ Viewer
- CVE-2021-25664 Denial of service in Capital Embedded AR Classic 431-422
- CVE-2021-25663 Denial of service in Capital Embedded AR Classic 431-422
- CVE-2021-25662 Denial of service in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- CVE-2021-25661 Memory corruption in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- CVE-2021-25660 Memory corruption in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- CVE-2021-25659 Denial of service in Automation License Manager 5
- CVE-2021-25657 Avaya IP Office Privilege Escalation Vulnerability
- CVE-2021-25656 Avaya Aura Experience Portal XSS vulnerabilities
- CVE-2021-25655 URL redirection to untrusted site possible in Avaya Aura Experience Portal
- CVE-2021-25654 Avaya Aura Device Services Arbitrary Code Execution Vulnerability
- CVE-2021-25653 Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability
- CVE-2021-25652 Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability
- CVE-2021-25651 Avaya Aura Utility Services Privilege Escalation Vulnerability
- CVE-2021-25650 Avaya Aura Utility Services Privilege Escalation Vulnerability
- CVE-2021-25649 Avaya Utility Services Sensitive Information Disclosure Vulnerability
- CVE-2021-25648 Auth bypass in testes-codigo:testes de codigo
- CVE-2021-25647 Cross-site scripting in testes-codigo:testes de codigo
- CVE-2021-25646 Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.
- CVE-2021-25645 Information disclosure in couchbase:couchbase server
- CVE-2021-25644 Information disclosure in couchbase:couchbase server
- CVE-2021-25643 Information disclosure in couchbase:couchbase server
- CVE-2021-25642 Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler
- CVE-2021-25641 Dubbo Zookeeper does not check serialization id
- CVE-2021-25640 Open Redirect or SSRF vulnerability usage of parseURL
- CVE-2021-25636 Incorrect trust validation of signature with ambiguous KeyInfo children
- CVE-2021-25635 Content Manipulation with Certificate Validation Attack
- CVE-2021-25634 Timestamp Manipulation with Signature Wrapping
- CVE-2021-25633 Content Manipulation with Double Certificate Attack
- CVE-2021-25631 denylist of executable filename extensions possible to bypass under windows
- CVE-2021-25630 Privilege escalation in Collabora Online
- CVE-2021-25527 Missing authorization in Samsung Pay
- CVE-2021-25526 Privilege escalation in Samsung Blockchain Wallet
- CVE-2021-25525 Security feature bypass in Samsung Pay
- CVE-2021-25524 Information disclosure in Contacts
- CVE-2021-25523 Information disclosure in SamsungDialer
- CVE-2021-25522 Information disclosure in Samsung Capture
- CVE-2021-25521 Missing authorization in Samsung Internet
- CVE-2021-25520 Cross-site scripting in Samsung Internet
- CVE-2021-25519 Missing authorization in Samsung Mobile Devices
- CVE-2021-25518 Memory corruption in Samsung Mobile Devices
- CVE-2021-25517 Other in Samsung Mobile Devices
- CVE-2021-25516 Information disclosure in Samsung Mobile Devices
- CVE-2021-25515 Information disclosure in Samsung Mobile Devices
- CVE-2021-25514 Information disclosure in Samsung Mobile Devices
- CVE-2021-25513 Privilege escalation in Samsung Mobile Devices
- CVE-2021-25512 Other in Samsung Mobile Devices
- CVE-2021-25511 Path traversal in Samsung Mobile Devices
- CVE-2021-25510 Other in Samsung Mobile Devices
- CVE-2021-25509 Other in Samsung Flow
- CVE-2021-25508 Privilege escalation in SmartThings
- CVE-2021-25507 Missing authorization in Samsung Flow
- CVE-2021-25506 Missing authorization in Samsung Health
- CVE-2021-25505 Auth bypass in Samsung Pass
- CVE-2021-25504 Information disclosure in Group Sharing
- CVE-2021-25503 Other in Samsung Mobile Devices
- CVE-2021-25502 Information disclosure in Samsung Mobile Devices
- CVE-2021-25501 Missing authorization in Samsung Mobile Devices
- CVE-2021-25500 Memory corruption in Samsung Mobile Devices
- CVE-2021-25499 Missing authorization in Galaxy Store