Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 42 of 273.
- DRUPAL-CONTRIB-2021-042 Linkit provides an easy interface for internal and external linking with WYSIWYG editors by using an autocomplete field.
- DRUPAL-CONTRIB-2021-041 This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content.
- DRUPAL-CONTRIB-2021-040 This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content.
- DRUPAL-CONTRIB-2021-039 This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content.
- DRUPAL-CONTRIB-2021-038 This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content.
- DRUPAL-CONTRIB-2021-037 This module enables sites to define a domain from Domain Access that points directly to a group page.
- DRUPAL-CONTRIB-2021-036 This module provides a solution to authenticate visitors using existing SAML providers.
- DRUPAL-CONTRIB-2021-035 This module provides a powerful interface for managing a taxonomy vocabulary.
- DRUPAL-CONTRIB-2021-033 This module enables you to extract the textual content of files for use on a website, e.g.
- DRUPAL-CONTRIB-2021-032 This module provides a system for building an ecommerce solution in their Drupal site.
- DRUPAL-CONTRIB-2021-031 The module provides a field widget for selecting taxonomy terms in a hierarchical fashion.
- DRUPAL-CONTRIB-2021-030 This module enables you to create an individual hash for each user.
- DRUPAL-CONTRIB-2021-026 The Webform module uses the [CKEditor](https://github.com/ckeditor/ckeditor4), library for WYSIWYG editing.
- DRUPAL-CONTRIB-2021-025 The *Admin Toolbar* (`admin_toolbar`) module extends the default toolbar provided by Drupal Core with various features facilitating day-to-d
- DRUPAL-CONTRIB-2021-024 This project enables administrators to restrict access from anonymous and regular users to pre-defined pages.
- DRUPAL-CONTRIB-2021-023 This module provides a user interface that allows the implementation and use of *Form modes* without custom development.
- DRUPAL-CONTRIB-2021-022 This module provides a revision UI for Block Content entities.
- DRUPAL-CONTRIB-2021-021 This module provides a revision UI for Linky entities.
- DRUPAL-CONTRIB-2021-020 The Apigee Edge module allows connecting a Drupal site to Apigee Edge in order to build a developer portal.
- DRUPAL-CONTRIB-2021-019 This project is related to Opigno LMS distribution.
- DRUPAL-CONTRIB-2021-018 This project is related to Opigno LMS distribution.
- DRUPAL-CONTRIB-2021-017 This module provides a revision UI to Block Content entities.
- DRUPAL-CONTRIB-2021-016 This module provides a revision UI to Linky entities.
- DRUPAL-CONTRIB-2021-015 Chaos tool suite (ctools) module provides a number of APIs and extensions for Drupal, its 8.x-3.x branch is a start from scratch to evaluate
- DRUPAL-CONTRIB-2021-014 This module allows users to authenticate against an Oauth 2.0 / OpenID Connect identity provider to login to your Drupal site.
- DRUPAL-CONTRIB-2021-013 This module lets you craft and expose a GraphQL web service API.
- DRUPAL-CONTRIB-2021-009 Chaos tool suite (ctools) module provides a number of APIs and extensions for Drupal, it's 8.x-3.x branch is a start from scratch to evaluat
- DRUPAL-CONTRIB-2021-008 This module enables you to add customizable facets on search pages, from core search or searches provided by Search API.
- DRUPAL-CONTRIB-2021-007 This module provides a new UI experience for node editing using the Gutenberg Editor library.
- DRUPAL-CONTRIB-2021-006 The [SAML Authentication module](https://www.drupal.org/project/samlauth) allows users to authenticate against a SAML identity provider to l
- DRUPAL-CONTRIB-2021-005 The [Fast Autocomplete module](https://www.drupal.org/project/fac) provides fast IMDB-like suggestions below a text input field.
- DRUPAL-CONTRIB-2021-004 The [Webform module for Drupal 8/9](https://www.drupal.org/project/webform) includes a default Contact webform, which sends a notification e
- DRUPAL-CONTRIB-2021-003 This module enables you to add groups to other groups in a tree structure where access can be inherited up or down the tree.
- CVE-2021-48020 Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays
- CVE-2021-48019 Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies
- CVE-2021-48018 Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator
- CVE-2021-48017 OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgi
- CVE-2021-48016 DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
- CVE-2021-48015 JeeWMS Path Traversal via showOrDownByurl.do
- CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer
- CVE-2021-48013 Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload
- CVE-2021-48012 fast-toml through 0.5.4 Prototype Pollution via __proto__ Keys in Parsed TOML
- CVE-2021-48011 Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segments
- CVE-2021-48008 Chanjet CRM SQL Injection via get_usedspace.php
- CVE-2021-48007 PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket
- CVE-2021-48006 PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivity
- CVE-2021-47987 Parse Server - Arbitrary Code Execution via Malicious Version Tags
- CVE-2021-47986 Parse Server - Unreviewed Code Execution via Malicious Version Tags
- CVE-2021-47985 Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation
- CVE-2021-47984 WordPress Plugin WP24 Domain Check 1.6.2 Stored XSS
- CVE-2021-47983 WordPress Plugin Stripe Payments < 2.0.40 Stored XSS via currency_code
- CVE-2021-47982 WordPress Plugin WP-Paginate 2.1.3 Stored XSS via preset
- CVE-2021-47981 Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form
- CVE-2021-47980 Fuel CMS 1.4.13 Blind SQL Injection via col Parameter
- CVE-2021-47979 WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion
- CVE-2021-47978 ProcessMaker 3.5.4 Local File Inclusion via Path Traversal
- CVE-2021-47977 WordPress Anti-Malware Security Bruteforce Firewall <= 4.20.72 Directory Traversal
- CVE-2021-47976 TextPattern CMS 4.9.0-dev Authenticated Remote Code Execution via Plugin Upload
- CVE-2021-47975 WordPress Plugin WP Learn Manager 1.1.2 Stored XSS
- CVE-2021-47974 VX Search 13.5.28 Unquoted Service Path Privilege Escalation
- CVE-2021-47973 Sticky Notes Widget 3.0.6 Denial of Service via Buffer Overflow
- CVE-2021-47972 Sticky Notes & Color Widgets 1.4.2 Denial of Service
- CVE-2021-47971 My Notes Safe 5.3 Denial of Service via Buffer Overflow
- CVE-2021-47970 Macaron Notes 5.5 Denial of Service via Buffer Overflow
- CVE-2021-47969 Color Notes 1.4 Denial of Service via Long Character String
- CVE-2021-47968 Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description
- CVE-2021-47967 PHP Timeclock 1.04 Multiple Cross-Site Scripting via Parameters
- CVE-2021-47966 PHP Timeclock 1.04 SQL Injection via login.php
- CVE-2021-47965 WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Upload
- CVE-2021-47964 Schlix CMS 2.2.6-6 Remote Code Execution via core.blockmanager
- CVE-2021-47963 Anote 1.0 Persistent Cross-Site Scripting Leading to Code Execution
- CVE-2021-47962 Savsoft Quiz 5.0 Persistent Cross-Site Scripting via User Settings
- CVE-2021-47961 Information disclosure in Synology SSL VPN Client
- CVE-2021-47960 Information disclosure in Synology SSL VPN Client
- CVE-2021-47959 WordPress Plugin WPGraphQL 1.3.5 Denial of Service
- CVE-2021-47958 CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload
- CVE-2021-47957 WordPress Plugin Cookie Law Bar 1.2.1 Stored XSS via clb_bar_msg
- CVE-2021-47956 EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname
- CVE-2021-47955 CouchCMS 2.2.1 Cross-Site Scripting via SVG File Upload
- CVE-2021-47954 LayerBB 1.1.4 SQL Injection via search_query Parameter
- CVE-2021-47953 OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
- CVE-2021-47952 python jsonpickle 2.0.0 Remote Code Execution via py/repr
- CVE-2021-47951 WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
- CVE-2021-47950 Advanced Guestbook 2.4.4 Persistent XSS via Smilies
- CVE-2021-47949 CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
- CVE-2021-47948 WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text
- CVE-2021-47947 Projectsend r1295 Stored Cross-Site Scripting via files-edit.php
- CVE-2021-47946 OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery
- CVE-2021-47945 Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation
- CVE-2021-47944 memono Notepad 4.2 Denial of Service via Buffer Overflow
- CVE-2021-47943 TextPattern CMS 4.8.7 Remote Code Execution via File Upload
- CVE-2021-47942 Home Assistant Community Store 1.10.0 Path Traversal Account Takeover
- CVE-2021-47941 WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params
- CVE-2021-47940 WordPress Download From Files 1.48 Arbitrary File Upload
- CVE-2021-47939 Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation
- CVE-2021-47938 ImpressCMS 1.4.2 Remote Code Execution via Autotasks
- CVE-2021-47937 e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload
- CVE-2021-47936 OpenCATS 0.9.4 Remote Code Execution via Resume Upload
- CVE-2021-47935 Sentry 8.2.0 Remote Code Execution via Pickle Deserialization
- CVE-2021-47934 MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF