Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 238 of 273.
- CVE-2021-21458 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21457 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21456 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21455 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21454 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21453 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21452 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21451 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21450 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-2145 Other in VM VirtualBox
- CVE-2021-21449 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-21448 Information disclosure in SAP GUI FOR WINDOWS
- CVE-2021-21447 Cross-site scripting in SAP BusinessObjects Business Intelligence platform (Web Intelligence HTML interface)
- CVE-2021-21446 Denial of service in SAP NetWeaver AS ABAP
- CVE-2021-21445 Other in SAP Commerce Cloud
- CVE-2021-21444 Security feature bypass in SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad)
- CVE-2021-21443 Unautorized listing of the customer user emails
- CVE-2021-21442 XSS vulnerability in Time Accounting
- CVE-2021-21441 XSS in the ticket overview screens
- CVE-2021-21440 Support Bundle includes S/Mime and PGP keys
- CVE-2021-2144 Other in MySQL Server
- CVE-2021-21439 Possible DoS attack using a special crafted URL in email body
- CVE-2021-21438 FAQ articles are shown to users without permission
- CVE-2021-21437 Config Items are shown to users without permission
- CVE-2021-21436 Agent is able to link customer's Config Items without permission
- CVE-2021-21435 Information exposure in PDF export
- CVE-2021-21434 XSS in Survey Module
- CVE-2021-21433 Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation
- CVE-2021-21432 Reject unauthorized access with GitHub PATs
- CVE-2021-21431 Improper Input Validation in sopel-plugins.channelmgnt
- CVE-2021-21430 Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
- CVE-2021-21429 Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
- CVE-2021-21428 Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
- CVE-2021-21427 Backport for CVE-2021-21024 Blind SQLi from Magento 2
- CVE-2021-21426 Fixes a bug in Zend Framework's Stream HTTP Wrapper
- CVE-2021-21425 Unauthenticated Arbitrary YAML Write/Update leads to Code Execution
- CVE-2021-21424 Prevent user enumeration using Guard or the new Authenticator-based Security
- CVE-2021-21423 Exposure of Version-Control Repository to an Unauthorized Control Sphere in projen
- CVE-2021-21422 XSS Vulnerability in mongo-express
- CVE-2021-21421 ApiKey secret could be revelated on network issue
- CVE-2021-21420 Vulnerability in Stripe for Visual Studio Code < 1.7.3
- CVE-2021-2142 Cross-site scripting in WebLogic Server
- CVE-2021-21419 Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
- CVE-2021-21418 Potential XSS injection in the newsletter conditions field
- CVE-2021-21417 Use after free in fluidsynth
- CVE-2021-21416 Potential sensitive information disclosed in error reports
- CVE-2021-21415 Visual Studio Code Prisma Extension Remote Code Execution Vulnerability
- CVE-2021-21414 Command injection vulnerability in @prisma/sdk in getPackedPackage function
- CVE-2021-21413 Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate
- CVE-2021-21412 [thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values
- CVE-2021-21411 Incorrect authorization in OAuth2-Proxy
- CVE-2021-21410 Out-of-bounds read in the 6LoWPAN implementation
- CVE-2021-2141 Other in FLEXCUBE Direct Banking
- CVE-2021-21409 Possible request smuggling in HTTP/2 due missing validation of content-length
- CVE-2021-21408 Access to restricted PHP code by dynamic static class access in smarty
- CVE-2021-21407 Portal : the CSRF token isn't validated
- CVE-2021-21406 Command Injection vulnerability in the Setup Wizard
- CVE-2021-21405 BLS Signature "Malleability"
- CVE-2021-21404 Crash due to malformed relay protocol message
- CVE-2021-21403 Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server
- CVE-2021-21402 Unauthenticated Arbitrary File Access in Jellyfin
- CVE-2021-21401 Invalid free() call in Nanopb
- CVE-2021-21400 Entering code in App Lock modal sends input to conversation
- CVE-2021-2140 Other in Financial Services Analytical Applications Infrastructure
- CVE-2021-21399 Unauthenticated SubSonic backend access in Ampache
- CVE-2021-21398 Possible XSS injection through DataColumn Grid class
- CVE-2021-21396 Bulk list client endpoint exposes too much metadata about a client
- CVE-2021-21395 Magneto-lts vulnerable to Cross-Site Request Forgery
- CVE-2021-21394 Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
- CVE-2021-21393 Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
- CVE-2021-21392 Open redirect via transitional IPv6 addresses on dual-stack networks
- CVE-2021-21391 Regular expression Denial of Service in multiple packages
- CVE-2021-21390 MITM modification of request bodies in MinIO
- CVE-2021-21389 BuddyPress privilege escalation via REST API
- CVE-2021-21388 Command Injection Vulnerability in systeminformation
- CVE-2021-21387 Partial secret key disclosure, improper safety number calculation, & inadequate encryption strength
- CVE-2021-21386 Improper Neutralization of Argument Delimiters in a Decompiling Package Process
- CVE-2021-21385 Disabled hostname verification and accepting self-signed certificates
- CVE-2021-21384 Null characters not escaped in shescape
- CVE-2021-21383 XSS in Wiki.js
- CVE-2021-21382 Unsafe loopback forwarding interface in Restund
- CVE-2021-21381 Sandbox escape via special tokens in .desktop file
- CVE-2021-21380 Rating Script Service expose XWiki to SQL injection
- CVE-2021-2138 Other in Oracle Cloud Infrastructure Data Science Notebook Sessions
- CVE-2021-21379 It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro
- CVE-2021-21378 JWT authentication bypass with unknown issuer token
- CVE-2021-21377 Open Redirect in OMERO.web
- CVE-2021-21376 Information Exposure in OMERO.web
- CVE-2021-21375 Crash in receiving updated SDP answer after initial SDP negotiation failed
- CVE-2021-21374 Nimble fails to validate certificates due to insecure httpClient defaults
- CVE-2021-21373 Nimble falls back to insecure http url when fetching packages
- CVE-2021-21372 Nimble arbitrary code execution for specially crafted package metadata
- CVE-2021-21371 Execution of untrusted code through config file
- CVE-2021-21370 Cross-Site Scripting in Content Preview (CType menu)
- CVE-2021-2137 Other in Enterprise Manager Base Platform
- CVE-2021-21369 Potential DoS in Besu HTTP JSON-RPC API
- CVE-2021-21368 Prototype poisoning
- CVE-2021-21367 Incorrect Authorization in switchboard-plug-bluetooth
- CVE-2021-21366 Misinterpretation of malicious XML input
- CVE-2021-21365 Cross-Site Scripting in Content Rendering