Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 205 of 273.
- CVE-2021-25290 Out-of-bounds Write in Pillow
- CVE-2021-25289 Out of bounds write in Pillow
- CVE-2021-25288 Pillow Out-of-bounds Read vulnerability
- CVE-2021-25287 Out-of-bounds Read in Pillow
- CVE-2021-25284 SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod
- CVE-2021-25283 SaltStack Salt Server Side Template Injection
- CVE-2021-25282 SaltStack Salt Directory Traversal vulnerability
- CVE-2021-25281 SaltStack Salt Improper Authentication vulnerability
- CVE-2021-25278 Cross-site scripting in ftapi:ftapi
- CVE-2021-25277 Cross-site scripting in ftapi:ftapi
- CVE-2021-25276 Misconfiguration in solarwinds:serv-u
- CVE-2021-25275 Hardcoded credentials in solarwinds:orion platform
- CVE-2021-25274 Deserialization in solarwinds:orion platform
- CVE-2021-25273 Cross-site scripting in Sophos UTM
- CVE-2021-25271 Privilege escalation in HitmanPro
- CVE-2021-25270 Privilege escalation in HitmanPro.Alert
- CVE-2021-25269 Security feature bypass in Intercept X Advanced
- CVE-2021-25268 Cross-site scripting in Sophos Firewall
- CVE-2021-25267 Cross-site scripting in Sophos Firewall
- CVE-2021-25266 Information disclosure in Intercept X for Mobile (Android)
- CVE-2021-25265 Other in Sophos Connect Client
- CVE-2021-25264 Privilege escalation in Intercept X for MacOS
- CVE-2021-25263 Privilege escalation in Yandex Browser (Desktop)
- CVE-2021-25262 Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
- CVE-2021-25261 Privilege escalation in Yandex Browser (Desktop)
- CVE-2021-25255 Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.
- CVE-2021-25254 Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.
- CVE-2021-25253 Privilege escalation in Trend Micro Apex One
- CVE-2021-25252 Denial of service in Trend Micro Virus Scan API (VSAPI) Engine
- CVE-2021-25251 Code injection in Trend Micro Security (Consumer)
- CVE-2021-25250 Privilege escalation in Trend Micro Apex One
- CVE-2021-25249 Memory corruption in Trend Micro Apex One
- CVE-2021-25248 Information disclosure in Trend Micro Apex One
- CVE-2021-25247 Privilege escalation in Trend Micro HouseCall for Home Networks
- CVE-2021-25246 Missing authorization in Trend Micro Apex One
- CVE-2021-25245 Missing authorization in Trend Micro Worry-Free Business Security
- CVE-2021-25244 Missing authorization in Trend Micro Worry-Free Business Security
- CVE-2021-25243 Missing authorization in Trend Micro Apex One
- CVE-2021-25242 Information disclosure in Trend Micro Apex One
- CVE-2021-25241 Server-side request forgery in Trend Micro Apex One
- CVE-2021-25240 Missing authorization in Trend Micro Apex One
- CVE-2021-25239 Missing authorization in Trend Micro Apex One
- CVE-2021-25238 Information disclosure in Trend Micro OfficeScan
- CVE-2021-25237 Missing authorization in Trend Micro Apex One
- CVE-2021-25236 Server-side request forgery in Trend Micro OfficeScan
- CVE-2021-25235 Missing authorization in Trend Micro Apex One
- CVE-2021-25234 Missing authorization in Trend Micro Apex One
- CVE-2021-25233 Missing authorization in Trend Micro Apex One
- CVE-2021-25232 Missing authorization in Trend Micro Apex One
- CVE-2021-25231 Missing authorization in Trend Micro Apex One
- CVE-2021-25230 Missing authorization in Trend Micro Apex One
- CVE-2021-25229 Missing authorization in Trend Micro Apex One
- CVE-2021-25228 Missing authorization in Trend Micro Apex One
- CVE-2021-25227 Denial of service in Trend Micro Antivirus for Mac
- CVE-2021-25226 Denial of service in Trend Micro ServerProtect for Linux
- CVE-2021-25225 Denial of service in Trend Micro ServerProtect for Linux
- CVE-2021-25224 Denial of service in Trend Micro ServerProtect for Linux
- CVE-2021-25220 DNS forwarders - cache poisoning vulnerability
- CVE-2021-25219 Lame cache can be abused to severely degrade resolver performance
- CVE-2021-25218 Denial of service in BIND9
- CVE-2021-25217 A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient
- CVE-2021-25216 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
- CVE-2021-25215 Denial of service in BIND9
- CVE-2021-25214 A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly
- CVE-2021-25213 SQL injection in travel management system project:travel management system
- CVE-2021-25212 SQL injection in alumni management system project:alumni management system
- CVE-2021-25211 File upload in online ordering system project:online ordering system
- CVE-2021-25210 File upload in alumni management system project:alumni management system
- CVE-2021-25209 SQL injection in theme park ticketing system project:theme park ticketing system
- CVE-2021-25208 File upload in travel management system project:travel management system
- CVE-2021-25207 File upload in e-commerce website project:e-commerce website
- CVE-2021-25206 File upload in responsive ordering system project:responsive ordering system
- CVE-2021-25205 SQL injection in e-commerce website project:e-commerce website
- CVE-2021-25204 Cross-site scripting in e-commerce website project:e-commerce website
- CVE-2021-25203 File upload in victor cms project:victor cms
- CVE-2021-25202 SQL injection in sales and inventory system project:sales and inventory system
- CVE-2021-25201 SQL injection in learning management system project:learning management system
- CVE-2021-25200 File upload in learning management system project:learning management system
- CVE-2021-25197 Cross-site scripting in content management system project:content management system
- CVE-2021-25195 Windows PKU2U Elevation of Privilege Vulnerability
- CVE-2021-25179 Cross-site scripting in solarwinds:serv-u file server
- CVE-2021-25178 Memory corruption in opendesign:drawings software development kit
- CVE-2021-25177 Memory corruption in opendesign:drawings software development kit
- CVE-2021-25176 Null dereference in opendesign:drawings software development kit
- CVE-2021-25175 Denial of service in opendesign:drawings software development kit
- CVE-2021-25174 Memory corruption in opendesign:drawings software development kit
- CVE-2021-25173 Denial of service in opendesign:drawings software development kit
- CVE-2021-25172 Command injection in HPE Apollo 70 System
- CVE-2021-25171 Memory corruption in HPE Apollo 70 System
- CVE-2021-25170 Memory corruption in HPE Apollo 70 System
- CVE-2021-25169 Memory corruption in HPE Apollo 70 System
- CVE-2021-25168 Memory corruption in HPE Apollo 70 System
- CVE-2021-25167 Command injection in Aruba AirWave Management Platform
- CVE-2021-25166 Command injection in Aruba AirWave Management Platform
- CVE-2021-25165 XML external entity in Aruba AirWave Management Platform
- CVE-2021-25164 XML external entity in Aruba AirWave Management Platform
- CVE-2021-25163 XML external entity in Aruba AirWave Management Platform
- CVE-2021-25162 Command injection in Aruba Instant Access Points
- CVE-2021-25161 Cross-site scripting in Aruba Instant Access Points
- CVE-2021-25160 Other in Aruba Instant Access Points