Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 224 of 273.
- CVE-2021-22951 Password exposure in concrete5/core
- CVE-2021-22950 Cross-site request forgery in https://github.com/concrete5/concrete5
- CVE-2021-2295 Other in Concurrent Processing
- CVE-2021-22949 Cross-site request forgery in https://github.com/concrete5/concrete5
- CVE-2021-22948 Weak cryptography in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22947 Security feature bypass in https://github.com/curl/curl
- CVE-2021-22946 Security feature bypass in https://github.com/curl/curl
- CVE-2021-22945 Use after free in https://github.com/curl/curl
- CVE-2021-22944 Privilege escalation in UniFi Protect application
- CVE-2021-22943 Auth bypass in UniFi Protect application
- CVE-2021-22942 Open Redirect in ActionPack
- CVE-2021-22941 Citrix ShareFile Improper Access Control
- CVE-2021-22940 Use after free in Node
- CVE-2021-2294 Other in WebLogic Server
- CVE-2021-22939 Security feature bypass in Node
- CVE-2021-22938 Command injection in Pulse Connect Secure
- CVE-2021-22937 File upload in Pulse Connect Secure
- CVE-2021-22936 Cross-site scripting in Pulse Connect Secure
- CVE-2021-22935 Command injection in Pulse Connect Secure
- CVE-2021-22934 Memory corruption in Pulse Connect Secure
- CVE-2021-22933 Path traversal in Pulse Connect Secure
- CVE-2021-22932 Security feature bypass in Citrix ShareFile Storage Zones Controller
- CVE-2021-22931 Other in Node
- CVE-2021-22930 Use After Free in node.js
- CVE-2021-2293 Denial of service in MySQL Server
- CVE-2021-22929 Information disclosure in https://github.com/brave/brave-core
- CVE-2021-22928 Privilege escalation in Citrix Virtual Apps and Desktops
- CVE-2021-22927 Auth bypass in Citrix ADC, Citrix Gateway
- CVE-2021-22926 Security feature bypass in https://github.com/curl/curl
- CVE-2021-22925 Information disclosure in https://github.com/curl/curl
- CVE-2021-22924 Security feature bypass in https://github.com/curl/curl
- CVE-2021-22923 Information disclosure in https://github.com/curl/curl
- CVE-2021-22922 Security feature bypass in https://github.com/curl/curl
- CVE-2021-22921 Incorrect Permission Assignment for Critical Resource in Node
- CVE-2021-22920 Auth bypass in Citrix ADC, Citrix Gateway
- CVE-2021-2292 Other in Document Management and Collaboration
- CVE-2021-22919 Denial of service in Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP
- CVE-2021-22918 Out-of-Bounds Read in Node.js
- CVE-2021-22917 Information disclosure in https://github.com/brave/brave-core
- CVE-2021-22916 Information disclosure in https://github.com/brave/brave-core
- CVE-2021-22915 Security feature bypass in Nextcloud Server
- CVE-2021-22914 Information disclosure in Citrix Cloud Connector
- CVE-2021-22913 Information disclosure in Nextcloud Deck
- CVE-2021-22912 Information disclosure in Nextcloud iOS app (it.twsweb.Nextcloud)
- CVE-2021-22911 SQL injection in Rocket.Chat server
- CVE-2021-22910 SQL injection in Rocket.Chat server
- CVE-2021-2291 Information disclosure in VM VirtualBox
- CVE-2021-22909 Weak cryptography in EdgeMAX EdgeRouter
- CVE-2021-22908 Memory corruption in Pulse Connect Secure
- CVE-2021-22907 Privilege escalation in Citrix Workspace App for Windows
- CVE-2021-22906 Missing authorization in Nextcloud End-to-End Encryption
- CVE-2021-22905 Information disclosure in Nextcloud Android App (com.nextcloud.client)
- CVE-2021-22904 Possible DoS Vulnerability in Action Controller Token Authentication
- CVE-2021-22903 Possible Open Redirect Vulnerability in Action Pack
- CVE-2021-22902 Denial of Service in Action Dispatch
- CVE-2021-22901 Use after free in https://github.com/curl/curl
- CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload
- CVE-2021-2290 Other in Engineering
- CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection
- CVE-2021-22898 Information disclosure in https://github.com/curl/curl
- CVE-2021-22897 Race condition in https://github.com/curl/curl
- CVE-2021-22896 Missing authorization in Nextcloud Mail
- CVE-2021-22895 Security feature bypass in Nextcloud Desktop Client
- CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow
- CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free
- CVE-2021-22892 Information disclosure in Rocket.Chat server
- CVE-2021-22891 Missing authorization in Citrix ShareFile Storage Zones Controller
- CVE-2021-22890 Security feature bypass in https://github.com/curl/curl
- CVE-2021-2289 Other in Product Hub
- CVE-2021-22889 Cross-site scripting in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22888 Cross-site scripting in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22887 Supply chain in PSA5000, PSA7000
- CVE-2021-22886 Cross-site scripting in Rocket.Chat
- CVE-2021-22885 Action Pack contains Information Disclosure / Unintended Method Execution vulnerability
- CVE-2021-22884 Node.js bad
- CVE-2021-22883 Denial of service in Node
- CVE-2021-22882 Denial of service in UniFi Protect
- CVE-2021-22881 Actionpack Open Redirect Vulnerability
- CVE-2021-22880 Active Record subject to Regular Expression Denial-of-Service (ReDoS)
- CVE-2021-2288 Other in Bills of Material
- CVE-2021-22879 Code injection in Nextcloud Desktop Client
- CVE-2021-22878 Cross-site scripting in Nextcloud Server
- CVE-2021-22877 Missing authorization in Nextcloud Server
- CVE-2021-22876 Information disclosure in https://github.com/curl/curl
- CVE-2021-22875 Cross-site scripting in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22874 Cross-site scripting in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22873 Open redirect in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22872 Cross-site scripting in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22871 Cross-site scripting in https://github.com/revive-adserver/revive-adserver
- CVE-2021-22870 Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access
- CVE-2021-2287 Information disclosure in VM VirtualBox
- CVE-2021-22869 Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group
- CVE-2021-22868 Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- CVE-2021-22867 Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- CVE-2021-22866 Other in GitHub Enterprise Server
- CVE-2021-22865 Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata
- CVE-2021-22864 Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- CVE-2021-22863 Missing authorization in GitHub Enterprise Server
- CVE-2021-22862 Improper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks
- CVE-2021-22861 Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories