Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 60 of 273.
- CVE-2021-45802 SQL injection in iresturant project:iresturant
- CVE-2021-45794 SQL injection in slims:senayan library management system
- CVE-2021-45793 SQL injection in slims:senayan library management system
- CVE-2021-45792 Cross-site scripting in slims:senayan library management system
- CVE-2021-45791 SQL injection in slims:senayan library management system
- CVE-2021-45790 File upload in metersphere:metersphere
- CVE-2021-45789 Path traversal in metersphere:metersphere
- CVE-2021-45788 SQL injection in metersphere:metersphere
- CVE-2021-45787 Cross-site scripting in maccms:maccms
- CVE-2021-45786 Auth bypass in maccms:maccms
- CVE-2021-45785 Cross-site request forgery in trudesk project:trudesk
- CVE-2021-45783 Path traversal in bookeen:notea firmware
- CVE-2021-45773 Null dereference in mz-automation:lib60870
- CVE-2021-45769 Null dereference in mz-automation:libiec61850
- CVE-2021-45767 Memory corruption in gpac:gpac
- CVE-2021-45764 Memory corruption in gpac:gpac
- CVE-2021-45763 Denial of service in gpac:gpac
- CVE-2021-45762 Memory corruption in gpac:gpac
- CVE-2021-45761 Null dereference in ropium project:ropium
- CVE-2021-45760 Memory corruption in gpac:gpac
- CVE-2021-45757 Memory corruption in asus:rt-ac68u firmware
- CVE-2021-45756 Memory corruption in asus:rt-ac5300 firmware
- CVE-2021-45746 Path traversal in webank:wecube
- CVE-2021-45745 Cross-site scripting in bludit:bludit
- CVE-2021-45744 Cross-site scripting in bludit:bludit
- CVE-2021-45742 Command injection in totolink:a720r firmware
- CVE-2021-45741 Memory corruption in totolink:x5000r firmware
- CVE-2021-45740 Memory corruption in totolink:a720r firmware
- CVE-2021-45739 Memory corruption in totolink:a720r firmware
- CVE-2021-45738 Command injection in totolink:x5000r firmware
- CVE-2021-45737 Memory corruption in totolink:a720r firmware
- CVE-2021-45736 Memory corruption in totolink:x5000r firmware
- CVE-2021-45735 Information disclosure in totolink:x5000r firmware
- CVE-2021-45734 Memory corruption in totolink:x5000r firmware
- CVE-2021-45733 Command injection in totolink:x5000r firmware
- CVE-2021-45732 Hardcoded credentials in Netgear Nighthawk R6700
- CVE-2021-45730 Missing authorization in Artifactory
- CVE-2021-45729 WordPress WP Google Map plugin <= 1.8.0 - Privilege Escalation vulnerability
- CVE-2021-45721 Cross-site scripting in JFrog Artifactory
- CVE-2021-45720 Use after free in lru crate
- CVE-2021-45719 Use after free in rusqlite project:rusqlite
- CVE-2021-45718 Use after free in rusqlite project:rusqlite
- CVE-2021-45717 Use after free in rusqlite project:rusqlite
- CVE-2021-45716 Use after free in rusqlite project:rusqlite
- CVE-2021-45715 Use after free in rusqlite project:rusqlite
- CVE-2021-45714 Use after free in rusqlite project:rusqlite
- CVE-2021-45713 Use after free in rusqlite project:rusqlite
- CVE-2021-45712 RustEmbed generated `get` method allows for directory traversal when reading files from disk
- CVE-2021-45711 Panic on incorrect date input to `simple_asn1`
- CVE-2021-45710 Race Condition in tokio
- CVE-2021-45709 Use of a Broken or Risky Cryptographic Algorithm in crypto2
- CVE-2021-45708 Abomonation transmutes &T to and from &[u8] without sufficient constraints
- CVE-2021-45707 Out-of-bounds Write in nix
- CVE-2021-45706 Memory flaw in zeroize_derive
- CVE-2021-45705 Aliased mutable references from `tls_rand` & `TlsWyRand`
- CVE-2021-45704 AtomicBucket<T> unconditionally implements Send/Sync
- CVE-2021-45703 Duplicate Advisory: `Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)
- CVE-2021-45702 Use After Free in tremor-script
- CVE-2021-45701 Use After Free in tremor-script
- CVE-2021-45700 Process crashes when the cell used as DepGroup is not alive
- CVE-2021-45699 Allocation of Resources Without Limits or Throttling in ckb
- CVE-2021-45698 RPC call failure in ckb
- CVE-2021-45697 The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.
- CVE-2021-45696 Incorrect hash in sha2
- CVE-2021-45695 Incorrect reliance on Trait memory layout in mopa
- CVE-2021-45694 Window may read from uninitialized memory locations in rdiff
- CVE-2021-45693 Use of Uninitialized Resource in messagepack-rs.
- CVE-2021-45692 Use of Uninitialized Resource in messagepack-rs.
- CVE-2021-45691 Use of Uninitialized Resource in messagepack-rs
- CVE-2021-45690 Use of Uninitialized Resource in messagepack-rs.
- CVE-2021-45689 Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` )
- CVE-2021-45688 Use of Uninitialized Resource in ash.
- CVE-2021-45687 Optional `Deserialize` implementations lacking validation
- CVE-2021-45686 Use of Uninitialized Resource in csv-sniffer.
- CVE-2021-45685 columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())
- CVE-2021-45684 Use of Uninitialized Resource in flumedb.
- CVE-2021-45683 'Read' on uninitialized memory may cause UB
- CVE-2021-45682 `Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`)
- CVE-2021-45681 QueryInterface should call AddRef before returning pointer
- CVE-2021-45680 vec-const attempts to construct a Vec from a pointer to a const slice
- CVE-2021-45679 Privilege escalation in netgear:r6900p firmware
- CVE-2021-45678 Other in netgear:rax200 firmware
- CVE-2021-45677 Cross-site scripting in netgear:gs108t firmware
- CVE-2021-45676 Cross-site scripting in netgear:rax15 firmware
- CVE-2021-45675 Cross-site scripting in netgear:ac2100 firmware
- CVE-2021-45674 Cross-site scripting in netgear:r7000 firmware
- CVE-2021-45673 Cross-site scripting in netgear:r6900p firmware
- CVE-2021-45672 Cross-site scripting in netgear:ac2100 firmware
- CVE-2021-45671 Cross-site scripting in netgear:cbr40 firmware
- CVE-2021-45670 Cross-site scripting in netgear:cbr40 firmware
- CVE-2021-45669 Cross-site scripting in netgear:mr60 firmware
- CVE-2021-45668 Cross-site scripting in netgear:eax20 firmware
- CVE-2021-45667 Cross-site scripting in netgear:cbr40 firmware
- CVE-2021-45666 Cross-site scripting in netgear:cbr40 firmware
- CVE-2021-45665 Cross-site scripting in netgear:eax20 firmware
- CVE-2021-45664 Cross-site scripting in netgear:r7000 firmware
- CVE-2021-45663 Cross-site scripting in netgear:r7000 firmware
- CVE-2021-45662 Cross-site scripting in netgear:r7000 firmware
- CVE-2021-45661 Code injection in netgear:rbk20 firmware
- CVE-2021-45660 Code injection in netgear:rbk20 firmware