Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 243 of 273.
- CVE-2021-20992 Fibaro Home Center Unencrypted management interface
- CVE-2021-20991 Fibaro Home Center Authenticated remote command execution
- CVE-2021-20990 Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode
- CVE-2021-2099 Other in CRM Technical Foundation
- CVE-2021-20989 Fibaro Home Center Insufficient remote access server authorization
- CVE-2021-20988 Hilscher rcX RTOS: Wrong handling of the UDP checksum
- CVE-2021-20987 Hilscher: EtherNet/IP stack crash for specific CIP service
- CVE-2021-20986 Hilscher: Denial of Service vulnerability in PROFINET IO Device
- CVE-2021-2098 Other in Email Center
- CVE-2021-2097 Other in iSupport
- CVE-2021-2096 Other in iStore
- CVE-2021-2094 Other in One-to-One Fulfillment
- CVE-2021-2093 Other in Common Applications
- CVE-2021-2092 Other in CRM Technical Foundation
- CVE-2021-2091 Other in Scripting
- CVE-2021-2090 Other in Email Center
- CVE-2021-2089 Other in iStore
- CVE-2021-2088 Denial of service in MySQL Server
- CVE-2021-20877 Cross-site scripting in Canon laser printers and small office multifunctional printers
- CVE-2021-20876 Path traversal in GroupSession Free edition, GroupSession byCloud, GroupSession ZION
- CVE-2021-20875 Open redirect in GroupSession Free edition, GroupSession byCloud, GroupSession ZION
- CVE-2021-20874 Misconfiguration in GroupSession Free edition, GroupSession byCloud, GroupSession ZION
- CVE-2021-20873 Open redirect in Yappli
- CVE-2021-20872 Security feature bypass in bizhub series
- CVE-2021-20871 Information disclosure in bizhub series
- CVE-2021-20870 Information disclosure in bizhub series
- CVE-2021-2087 Denial of service in MySQL Server
- CVE-2021-20869 Information disclosure in bizhub series
- CVE-2021-20868 Missing authorization in bizhub series
- CVE-2021-20867 Missing authorization in Advanced Custom Fields and Advanced Custom Fields Pro
- CVE-2021-20866 Missing authorization in Advanced Custom Fields and Advanced Custom Fields Pro
- CVE-2021-20865 Missing authorization in Advanced Custom Fields and Advanced Custom Fields Pro
- CVE-2021-20864 Missing authorization in ELECOM routers
- CVE-2021-20863 Command injection in ELECOM routers
- CVE-2021-20862 Missing authorization in ELECOM routers
- CVE-2021-20861 Auth bypass in ELECOM LAN routers
- CVE-2021-20860 Cross-site request forgery in ELECOM LAN routers
- CVE-2021-2086 Denial of service in VM VirtualBox
- CVE-2021-20859 Command injection in ELECOM LAN routers
- CVE-2021-20858 Cross-site scripting in ELECOM LAN router
- CVE-2021-20857 Cross-site scripting in ELECOM LAN router
- CVE-2021-20856 Cross-site scripting in ELECOM LAN routers
- CVE-2021-20855 Cross-site scripting in ELECOM LAN routers
- CVE-2021-20854 Command injection in ELECOM LAN routers
- CVE-2021-20853 Command injection in ELECOM LAN routers
- CVE-2021-20852 Memory corruption in ELECOM LAN routers
- CVE-2021-20851 Cross-site request forgery in Browser and Operating System Finder
- CVE-2021-20850 Command injection in PowerCMS XMLRPC API
- CVE-2021-2085 Other in CRM Technical Foundation
- CVE-2021-20848 Cross-site Scripting in github.com/schollz/rwtxt
- CVE-2021-20847 Cross-site scripting in Wi-Fi STATION SH-52A
- CVE-2021-20846 Cross-site request forgery in Push Notifications for WordPress (Lite)
- CVE-2021-20845 Cross-site request forgery in Unlimited Sitemap Generator
- CVE-2021-20844 Cross-site scripting in RTX830, NVR510, NVR700W, RTX1210
- CVE-2021-20843 Cross-site scripting in RTX830, NVR510, NVR700W, RTX1210
- CVE-2021-20842 EC-CUBE Cross-site request forgery (CSRF) vulnerability
- CVE-2021-20841 EC-CUBE Improper access control in Management screen
- CVE-2021-20840 Cross-site scripting in Booking Package - Appointment Booking Calendar System
- CVE-2021-2084 Other in CRM Technical Foundation
- CVE-2021-20839 XML external entity in Office Server Document Converter
- CVE-2021-20838 XML external entity in Office Server Document Converter
- CVE-2021-20837 Command injection in Movable Type
- CVE-2021-20836 Memory corruption in OMRON CX-Supervisor
- CVE-2021-20835 Missing authorization in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version)
- CVE-2021-20834 Open redirect in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1
- CVE-2021-20833 Weak cryptography in SNKRDUNK Market Place App for iOS
- CVE-2021-20832 Information disclosure in InBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90(510)
- CVE-2021-20831 Cross-site request forgery in OG Tags
- CVE-2021-2083 Other in iSupport
- CVE-2021-20829 Cross-site scripting in GROWI
- CVE-2021-20828 Cross-site scripting in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series)
- CVE-2021-20827 Information disclosure in IDEC PLC
- CVE-2021-20826 Information disclosure in IDEC PLC
- CVE-2021-20825 Cross-site scripting in List (order management) item change plug-in (for EC-CUBE 3.0 series)
- CVE-2021-2082 Other in iStore
- CVE-2021-20815 Cross-site scripting in Movable Type
- CVE-2021-20814 Cross-site scripting in Movable Type
- CVE-2021-20813 Cross-site scripting in Movable Type
- CVE-2021-20812 Cross-site scripting in Movable Type
- CVE-2021-20811 Cross-site scripting in Movable Type
- CVE-2021-20810 Cross-site scripting in Movable Type
- CVE-2021-2081 Denial of service in MySQL Server
- CVE-2021-20809 Cross-site scripting in Movable Type
- CVE-2021-20808 Cross-site scripting in Movable Type
- CVE-2021-20807 Cross-site scripting in Cybozu Remote Service
- CVE-2021-20806 Open redirect in Cybozu Remote Service
- CVE-2021-20805 Cross-site scripting in Cybozu Remote Service
- CVE-2021-20804 Denial of service in Cybozu Remote Service
- CVE-2021-20803 Missing authorization in Cybozu Remote Service
- CVE-2021-20802 Other in Cybozu Remote Service
- CVE-2021-20801 XML external entity in Cybozu Remote Service
- CVE-2021-20800 Cross-site scripting in Cybozu Remote Service
- CVE-2021-2080 Other in Configurator
- CVE-2021-20799 Cross-site scripting in Cybozu Remote Service
- CVE-2021-20798 Cross-site scripting in Cybozu Remote Service
- CVE-2021-20797 Cross-site scripting in Cybozu Remote Service
- CVE-2021-20796 Path traversal in Cybozu Remote Service
- CVE-2021-20795 Cross-site request forgery in Cybozu Remote Service
- CVE-2021-20793 Other in The installers of multiple Sony products
- CVE-2021-20792 Cross-site scripting in Quiz And Survey Master