Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 44 of 273.
- CVE-2021-47830 GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF
- CVE-2021-47829 DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path
- CVE-2021-47828 BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path
- CVE-2021-47827 WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service
- CVE-2021-47826 Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
- CVE-2021-47825 Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
- CVE-2021-47824 iDailyDiary 4.30 - Denial of Service (PoC)
- CVE-2021-47823 ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path
- CVE-2021-47822 DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path
- CVE-2021-47821 RarmaRadio 2.72.8 - Denial of Service
- CVE-2021-47820 Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)
- CVE-2021-47819 ProjeQtOr Project Management 9.1.4 - Remote Code Execution
- CVE-2021-47818 DupTerminator 1.4.5639.37199 - Denial of Service
- CVE-2021-47817 OpenEMR 5.0.2.1 - Remote Code Execution
- CVE-2021-47816 Thecus N4800Eco Nas Server Control Panel - Command Injection
- CVE-2021-47815 Nsauditor 3.2.3 - Denial of Service (PoC)
- CVE-2021-47814 NBMonitor 1.6.8 - Denial of Service (PoC)
- CVE-2021-47813 Backup Key Recovery 2.2.7 - Denial of Service (PoC)
- CVE-2021-47812 GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)
- CVE-2021-47811 Grocery crud 1.6.4 - 'order_by' SQL Injection
- CVE-2021-47810 WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path
- CVE-2021-47809 Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service Path
- CVE-2021-47808 Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting
- CVE-2021-47807 Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path
- CVE-2021-47806 Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path
- CVE-2021-47805 Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path
- CVE-2021-47804 Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path
- CVE-2021-47803 iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path
- CVE-2021-47802 Tenda D151 & D301 - Configuration Download
- CVE-2021-47801 Vianeos OctoPUS 5 - 'login_user' SQLi
- CVE-2021-47800 b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)
- CVE-2021-47799 Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation
- CVE-2021-47798 NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
- CVE-2021-47797 Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
- CVE-2021-47796 Denver SHO-110 IP Camera Unauthenticated Snapshot Access
- CVE-2021-47795 GeoVision Geowebserver 5.3.3 - Local FIle Inclusion
- CVE-2021-47794 ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
- CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC)
- CVE-2021-47792 Remote Mouse 4.002 - Unquoted Service Path
- CVE-2021-47791 SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service
- CVE-2021-47790 Active WebCam 11.5 - Unquoted Service Path
- CVE-2021-47789 Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of Service (PoC)
- CVE-2021-47788 WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)
- CVE-2021-47787 TotalAV 5.15.69 - Unquoted Service Path
- CVE-2021-47786 Redragon Gaming Mouse - 'REDRAGON_MOUSE.sys' Denial of Service (PoC)
- CVE-2021-47785 Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH)
- CVE-2021-47784 Cyberfox Web Browser 52.9.1 - Denial of Service (PoC)
- CVE-2021-47783 Phpwcms 1.9.30 - Arbitrary File Upload
- CVE-2021-47782 Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection
- CVE-2021-47781 Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)
- CVE-2021-47780 Macro Expert 4.7 - Unquoted Service Path
- CVE-2021-47779 Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
- CVE-2021-47778 GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection
- CVE-2021-47777 Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)
- CVE-2021-47776 Umbraco v8.14.1 - 'baseUrl' SSRF
- CVE-2021-47775 YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)
- CVE-2021-47774 Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH)
- CVE-2021-47773 Dynojet Power Core 2.3.0 - Unquoted Service Path
- CVE-2021-47772 10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)
- CVE-2021-47771 RDP Manager 4.9.9.3 - Denial-of-Service (PoC)
- CVE-2021-47770 OpenPLC 3 - Remote Code Execution
- CVE-2021-47769 Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)
- CVE-2021-47768 ImportExportTools NG 10.0.4 - HTML Injection
- CVE-2021-47767 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
- CVE-2021-47766 Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated)
- CVE-2021-47765 AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)
- CVE-2021-47764 AbsoluteTelnet 11.24 - 'Phone' Denial of Service (PoC)
- CVE-2021-47763 Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection
- CVE-2021-47762 HTTPDebuggerPro 9.11 - Unquoted Service Path
- CVE-2021-47761 MilleGPG5 5.7.2 Luglio 2021 (x64) - Local Privilege Escalation
- CVE-2021-47759 MTPutty 1.0.1.21 - SSH Password Disclosure
- CVE-2021-47758 Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)
- CVE-2021-47757 Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
- CVE-2021-47756 Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)
- CVE-2021-47755 Oliver Library Server v5 - Arbitrary File Download
- CVE-2021-47754 Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
- CVE-2021-47753 phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)
- CVE-2021-47752 AWebServer GhostBuilding 18 - Denial of Service (DoS)
- CVE-2021-47751 CuteEditor for PHP 6.6 - Directory Traversal
- CVE-2021-47750 YouPHPTube <= 7.8 - Cross-Site Scripting
- CVE-2021-47749 YouPHPTube <= 7.8 - Directory Traversal
- CVE-2021-47748 Hasura GraphQL 1.3.3 - Remote Code Execution
- CVE-2021-47747 meterN 1.2.3 Authenticated Remote Code Execution via Admin Scripts
- CVE-2021-47746 NodeBB Plugin Emoji 3.2.1 - Arbitrary File Write
- CVE-2021-47745 Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection via Firmware Upgrade
- CVE-2021-47744 Cypress Solutions CTM-200/CTM-ONE 1.3.6 Hard-coded Credentials Remote Root
- CVE-2021-47743 COMMAX Biometric Access Control System 1.0.0 Reflected XSS via Cookie Parameters
- CVE-2021-47742 Epic Games Psyonix Rocket League <=1.95 Elevation of Privileges via Insecure Permissions
- CVE-2021-47741 ZBL EPON ONU Broadband Router V100R001 Privilege Escalation via Configuration Endpoint
- CVE-2021-47740 KZTech JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration Vulnerability
- CVE-2021-47739 Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path
- CVE-2021-47738 CSZ CMS 1.2.7 Persistent Cross-Site Scripting via Private Messaging
- CVE-2021-47737 CSZ CMS 1.2.7 HTML Injection Vulnerability via Member Dashboard
- CVE-2021-47736 CMSimple_XH 1.7.4 Authenticated Remote Code Execution via Content Editing
- CVE-2021-47735 CMSimple 5.4 Authenticated Remote Code Execution via Template Editing
- CVE-2021-47734 CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution
- CVE-2021-47733 CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding
- CVE-2021-47732 CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input
- CVE-2021-47731 Selea Targa IP Camera Developer Backdoor Configuration Overwrite
- CVE-2021-47730 Selea Targa IP Camera Cross-Site Request Forgery via Admin Creation