Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 222 of 273.
- CVE-2021-2323 Information disclosure in FLEXCUBE Universal Banking
- CVE-2021-23228 Delta Electronics DIAEnergie (Update A)
- CVE-2021-23227 WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2021-23225 Cross-site scripting in Cacti
- CVE-2021-23223 Privilege escalation in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
- CVE-2021-23222 Security feature bypass in postgresql
- CVE-2021-2322 Server-side request forgery in OpenGrok
- CVE-2021-23219 Information disclosure in NVIDIA GPU and Tegra hardware
- CVE-2021-23218 Memory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of Service
- CVE-2021-23217 Memory corruption in NVIDIA GPU and Tegra hardware
- CVE-2021-23215 Integer overflow in OpenEXR
- CVE-2021-23214 SQL injection in postgresql
- CVE-2021-23211 Information disclosure in Command Centre
- CVE-2021-23210 Denial of service in SoX (Sound eXchange)
- CVE-2021-2321 Memory corruption in VM VirtualBox
- CVE-2021-23209 Cross-site scripting in AMP for WP – Accelerated Mobile Pages (WordPress plugin)
- CVE-2021-23207 Fresenius Kabi Agilia Connect Infusion System plaintext storage of a password
- CVE-2021-23206 Memory corruption in htmldoc
- CVE-2021-23205 Privilege escalation in Command Centre
- CVE-2021-23204 Information disclosure in Command Centre
- CVE-2021-23203 Missing authorization in Odoo Community
- CVE-2021-23201 Security feature bypass in NVIDIA GPU and Tegra hardware
- CVE-2021-2320 Other in Cloud Infrastructure
- CVE-2021-23198 mySCADA myPRO
- CVE-2021-23197 Privilege escalation in Command Centre
- CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials
- CVE-2021-23195 Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing
- CVE-2021-23193 Privilege escalation in Command Centre
- CVE-2021-23192 Security feature bypass in samba
- CVE-2021-23191 Null dereference in htmldoc
- CVE-2021-2319 Other in Cloud Infrastructure
- CVE-2021-23188 Missing authorization in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
- CVE-2021-23186 Security feature bypass in Odoo Community
- CVE-2021-23182 Information disclosure in Command Centre
- CVE-2021-23180 Null dereference in htmldoc
- CVE-2021-2318 Other in Cloud Infrastructure
- CVE-2021-23179 Memory corruption in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products
- CVE-2021-23178 Business logic in Odoo Community
- CVE-2021-23177 Path traversal in libarchive
- CVE-2021-23176 Missing authorization in Odoo Community
- CVE-2021-23175 Missing authorization in NVIDIA GeForce Experience Software
- CVE-2021-23174 WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2021-23173 ICSMA-22-006-01 Philips Engage Software
- CVE-2021-23172 Memory corruption in SoX (Sound eXchange)
- CVE-2021-2317 Other in Cloud Infrastructure
- CVE-2021-23169 Memory corruption in OpenEXR
- CVE-2021-23168 Memory corruption in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
- CVE-2021-23167 Weak cryptography in Command Centre
- CVE-2021-23166 Security feature bypass in Odoo Community
- CVE-2021-23165 Memory corruption in htmldoc
- CVE-2021-23163 Cross-site request forgery in JFrog Artifactory
- CVE-2021-23162 Security feature bypass in Command Centre Mobile Connect for Android
- CVE-2021-2316 Other in HRMS (France)
- CVE-2021-23159 Memory corruption in SoX (Sound eXchange)
- CVE-2021-23158 Memory corruption in htmldoc
- CVE-2021-23157 WECON LeviStudioU
- CVE-2021-23155 Security feature bypass in Command Centre Mobile Client for Android
- CVE-2021-23154 Command injection in Lens
- CVE-2021-23152 Privilege escalation in Intel(R) Advisor software
- CVE-2021-23150 Cross-site scripting in AMP for WP – Accelerated Mobile Pages (WordPress plugin)
- CVE-2021-2315 Other in HTTP Server
- CVE-2021-23147 Auth bypass in Netgear Nighthawk R6700
- CVE-2021-23146 Auth bypass in Command Center
- CVE-2021-23140 Missing authorization in Command Centre
- CVE-2021-2314 Other in Application Object Library
- CVE-2021-23139 Null dereference in Trend Micro Apex One
- CVE-2021-23138 WECON LeviStudioU
- CVE-2021-23136 Missing authorization in Command Centre
- CVE-2021-23135 Argo CD leaked secret data into error messages and logs on invalid edits via UI
- CVE-2021-23134 Linux kernel llcp_sock_bind/connect use-after-free
- CVE-2021-23133 Linux Kernel sctp_destroy_sock race condition
- CVE-2021-23132 [20210306] - Core - com_media allowed paths that are not intended for image uploads
- CVE-2021-23131 [20210305] - Core - Input validation within the template manager
- CVE-2021-23130 [20210304] - Core - XSS within the feed parser library
- CVE-2021-23129 [20210303] - Core - XSS within alert messages showed to users
- CVE-2021-23128 [20210302] - Core - Potential Insecure FOFEncryptRandval
- CVE-2021-23127 [20210301] - Core - Insecure randomness within 2FA secret generation
- CVE-2021-23126 [20210301] - Core - Insecure randomness within 2FA secret generation
- CVE-2021-23125 [20210103] - Core - XSS in com_tags image parameters
- CVE-2021-23124 [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute
- CVE-2021-23123 [20210101] - Core - com_modules exposes module names
- CVE-2021-2312 Denial of service in VM VirtualBox
- CVE-2021-2311 Other in Hospitality Inventory Management
- CVE-2021-2310 Other in VM VirtualBox
- CVE-2021-2309 Other in VM VirtualBox
- CVE-2021-2308 Information disclosure in MySQL Server
- CVE-2021-2307 Other in MySQL Server
- CVE-2021-2306 Information disclosure in VM VirtualBox
- CVE-2021-23055 Security feature bypass in NGINX Ingress Controller
- CVE-2021-23054 Cross-site scripting in BIG-IP APM
- CVE-2021-23053 Denial of service in BIG-IP Advanced WAF and BIG-IP ASM
- CVE-2021-23052 Open redirect in BIG-IP APM
- CVE-2021-23051 Denial of service in BIG-IP
- CVE-2021-23050 Denial of service in BIG-IP Advanced WAF and BIG-IP ASM; NGINX App Protect
- CVE-2021-2305 Denial of service in MySQL Server
- CVE-2021-23049 Denial of service in BIG-IP
- CVE-2021-23048 Denial of service in BIG-IP
- CVE-2021-23047 Denial of service in BIG-IP APM
- CVE-2021-23046 Information disclosure in BIG-IP Guided Configuration
- CVE-2021-23045 Denial of service in BIG-IP