Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 226 of 273.
- CVE-2021-22751 Memory corruption in IGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22750 Memory corruption in IGSS Definition (Def.exe) V15.0.0.21041 and prior
- CVE-2021-2275 Other in Applications Manager
- CVE-2021-22749 Information disclosure in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior
- CVE-2021-22748 Path traversal in C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)
- CVE-2021-22747 Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems
- CVE-2021-22746 Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems
- CVE-2021-22745 Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems
- CVE-2021-22744 Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems
- CVE-2021-22743 Denial of service in Triconex TCM 4351B installed on Tricon V11.3.x systems.
- CVE-2021-22742 Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems
- CVE-2021-22741 Weak cryptography in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior)
- CVE-2021-22740 Information disclosure in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-2274 Other in E-Business Tax
- CVE-2021-22739 Information disclosure in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22738 Weak cryptography in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22737 Auth bypass in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22736 Path traversal in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22735 Security feature bypass in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22734 Security feature bypass in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22733 Privilege escalation in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22732 Privilege escalation in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior
- CVE-2021-22731 Auth bypass in Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior
- CVE-2021-22730 Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-2273 Other in Legal Entity Configurator
- CVE-2021-22729 Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22728 Information disclosure in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22727 Weak cryptography in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22726 Server-side request forgery in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22725 Cross-site request forgery in schneider-electric:evb1a firmware
- CVE-2021-22724 Cross-site request forgery in schneider-electric:evb1a firmware
- CVE-2021-22723 Cross-site request forgery in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22722 Cross-site scripting in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22721 Information disclosure in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22720 Path traversal in C-Bus Toolkit V1.15.7 and prior
- CVE-2021-2272 Other in Subledger Accounting
- CVE-2021-22719 Path traversal in C-Bus Toolkit V1.15.7 and prior
- CVE-2021-22718 Path traversal in C-Bus Toolkit V1.15.7 and prior
- CVE-2021-22717 Path traversal in C-Bus Toolkit V1.15.7 and prior
- CVE-2021-22716 Misconfiguration in C-Bus Toolkit
- CVE-2021-22714 Memory corruption in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0)
- CVE-2021-22713 Memory corruption in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions)
- CVE-2021-22712 Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior
- CVE-2021-22711 Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior
- CVE-2021-22710 Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior
- CVE-2021-2271 Other in Work in Process
- CVE-2021-22709 Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior
- CVE-2021-22708 Security feature bypass in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22707 Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22706 Cross-site scripting in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22705 Memory corruption in Harmony HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ) or EcoStruxure Machine Expert (all versions prior to V2.0)
- CVE-2021-22704 Path traversal in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0)
- CVE-2021-22703 Information disclosure in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions)
- CVE-2021-22702 Information disclosure in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions)
- CVE-2021-22701 Cross-site request forgery in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions)
- CVE-2021-2270 Other in Site Hub
- CVE-2021-22699 Denial of service in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1
- CVE-2021-22698 Memory corruption in EcoStruxure Power Build - Rapsody software V2.1.13 and prior.
- CVE-2021-22697 File upload in EcoStruxure Power Build - Rapsody software V2.1.13 and prior.
- CVE-2021-22696 OAuth 2 authorization service vulnerable to DDos attacks
- CVE-2021-2269 Other in Advanced Pricing
- CVE-2021-22685 Cassia Networks Access Controller Path Traversal
- CVE-2021-22684 Integer overflow in Tizen RT RTOS
- CVE-2021-22683 Memory corruption in Fatek FvDesigner
- CVE-2021-22682 Misconfiguration in Cscape
- CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials
- CVE-2021-22680 NXP MQX Integer Overflow or Wraparound
- CVE-2021-2268 Other in Quoting
- CVE-2021-22679 Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100
- CVE-2021-22678 Memory corruption in Cscape
- CVE-2021-22677 Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100
- CVE-2021-22676 Cross-site scripting in WebAccess/SCADA
- CVE-2021-22675 Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100
- CVE-2021-22674 Path traversal in WebAccess/SCADA
- CVE-2021-22673 Memory corruption in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100
- CVE-2021-22672 Memory corruption in Delta Electronics CNCSoft ScreenEditor
- CVE-2021-22671 Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100
- CVE-2021-22670 Memory corruption in Fatek FvDesigner
- CVE-2021-2267 Other in Labor Distribution
- CVE-2021-22669 Privilege escalation in Advantech WebAccess/SCADA
- CVE-2021-22668 Memory corruption in Delta Industrial Automation CNCSoft ScreenEditor
- CVE-2021-22667 Hardcoded credentials in BB-ESWGP506-2SFP-T
- CVE-2021-22666 Memory corruption in Fatek FvDesigner
- CVE-2021-22665 Privilege escalation in Rockwell Automation DriveTools SP and Drives AOP
- CVE-2021-22664 Memory corruption in Delta Electronics CNCSoft-B
- CVE-2021-22663 Memory corruption in Cscape
- CVE-2021-22662 Use after free in Fatek FvDesigner
- CVE-2021-22661 Auth bypass in ICX35-HWC-A, ICX35-HWC-E
- CVE-2021-22660 Memory corruption in Delta Electronics CNCSoft-B
- CVE-2021-2266 Information disclosure in VM VirtualBox
- CVE-2021-22659 Memory corruption in Rockwell Automation MicroLogix 1400
- CVE-2021-22658 SQL injection in Advantech iView
- CVE-2021-22657 mySCADA myPRO
- CVE-2021-22656 Path traversal in Advantech iView
- CVE-2021-22655 Memory corruption in Tellus Lite V-Simulator and V-Server Lite
- CVE-2021-22654 SQL injection in Advantech iView
- CVE-2021-22653 Memory corruption in Tellus Lite V-Simulator and V-Server Lite
- CVE-2021-22652 Missing authorization in Advantech iView
- CVE-2021-22651 Path traversal in Luxion KeyShot Network Rendering
- CVE-2021-22650 Ovarro TBox Relative Path Traversal