Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 67 of 273.
- CVE-2021-44599 SQL injection in online enrollment management system project:online enrollment management system
- CVE-2021-44598 Cross-site scripting in attendance management system project:attendance management system
- CVE-2021-44596 Missing authorization in wondershare:dr.fone
- CVE-2021-44595 Missing authorization in wondershare:dr.fone
- CVE-2021-44593 SQL injection in simple college website project:simple college website
- CVE-2021-44591 Denial of service in libming:libming
- CVE-2021-44590 Denial of service in libming:libming
- CVE-2021-4459 SMA: Directory Traversal in Sunny Boy <3.10.27.R
- CVE-2021-44586 Path traversal in dst-admin project:dst-admin
- CVE-2021-44585 Cross-site Scripting in jeecg-boot
- CVE-2021-44584 Cross-site scripting in emlog:emlog
- CVE-2021-44582 Privilege escalation in money transfer management system project:money transfer management system
- CVE-2021-44581 SQL injection in kreado:kreasfero
- CVE-2021-4458 Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
- CVE-2021-4457 ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload
- CVE-2021-44568 Memory corruption in opensuse:libsolv
- CVE-2021-44567 SQL injection in francoisjacquet/rosariosis
- CVE-2021-44566 Cross site scripting in francoisjacquet/rosariosis
- CVE-2021-44565 Cross site scripting in francoisjacquet/rosariosis
- CVE-2021-44564 Weak cryptography in kalkitech:sync2000-m1 firmware
- CVE-2021-4456 Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact
- CVE-2021-44557 XML external entity in kb:multiner
- CVE-2021-44556 XML external entity in kb:digger
- CVE-2021-44554 Information disclosure in cybelesoft:thinfinity virtualui
- CVE-2021-44550 Access Control vulnerability within CoreNLP
- CVE-2021-4455 Wordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload
- CVE-2021-44549 SMTPS server hostname not checked when making TLS connection to SMTPS server
- CVE-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler
- CVE-2021-44547 Privilege escalation in Odoo Community
- CVE-2021-44545 Denial of service in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
- CVE-2021-44544 Delta Electronics DIAEnergie (Update A)
- CVE-2021-44543 Cross-site scripting in privoxy
- CVE-2021-44542 Denial of service in Privoxy
- CVE-2021-44541 Denial of service in Privoxy
- CVE-2021-44540 Denial of service in Privoxy
- CVE-2021-4454 can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
- CVE-2021-44538 Memory corruption in cinny project:cinny
- CVE-2021-44537 Code injection in fedoraproject:fedora
- CVE-2021-44534 Path traversal in ExpressionEngine
- CVE-2021-44533 Security feature bypass in Node
- CVE-2021-44532 Security feature bypass in Node
- CVE-2021-44531 Security feature bypass in Node
- CVE-2021-44530 Code injection in UniFi Network application
- CVE-2021-4453 drm/amd/pm: fix a potential gpu_metrics_table memory leak
- CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
- CVE-2021-44528 actionpack Open Redirect in Host Authorization Middleware
- CVE-2021-44527 Denial of service in UniFi Switches
- CVE-2021-44526 Auth bypass in zohocorp:manageengine servicedesk plus
- CVE-2021-44525 Auth bypass in zohocorp:manageengine pam360
- CVE-2021-44524 Auth bypass in SiPass integrated V2.76
- CVE-2021-44523 Missing authorization in SiPass integrated V2.76
- CVE-2021-44522 Missing authorization in SiPass integrated V2.76
- CVE-2021-44521 Remote code execution for scripted UDFs
- CVE-2021-44520 Command injection in citrix:xenmobile server
- CVE-2021-4452 Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
- CVE-2021-44519 Path traversal in citrix:xenmobile server
- CVE-2021-44518 Weak cryptography in digipas:egeetouch manager
- CVE-2021-44515 Zoho Desktop Central Authentication Bypass
- CVE-2021-44514 Auth bypass in zohocorp:manageengine opmanager
- CVE-2021-44513 Race condition in tmate:tmate-ssh-server
- CVE-2021-44512 Misconfiguration in tmate:tmate-ssh-server
- CVE-2021-44510 Denial of service in fisglobal:gt.m
- CVE-2021-4451 NinjaFirewall <= 4.3.3 - Authenticated PHAR Deserialization
- CVE-2021-44509 Integer overflow in fisglobal:gt.m
- CVE-2021-44508 Null dereference in fisglobal:gt.m
- CVE-2021-44507 Null dereference in fisglobal:gt.m
- CVE-2021-44506 Null dereference in yottadb:gt.m
- CVE-2021-44505 Null dereference in yottadb:gt.m
- CVE-2021-44504 Integer overflow in fisglobal:gt.m
- CVE-2021-44503 Memory corruption in fisglobal:gt.m
- CVE-2021-44502 Denial of service in fisglobal:gt.m
- CVE-2021-44501 Null dereference in fisglobal:gt.m
- CVE-2021-44500 Denial of service in fisglobal:gt.m
- CVE-2021-4450 Post Grid <= 2.1.12 - Contributor+ SQL Injection
- CVE-2021-44499 Integer overflow in fisglobal:gt.m
- CVE-2021-44498 Null dereference in fisglobal:gt.m
- CVE-2021-44497 Use after free in fisglobal:gt.m
- CVE-2021-44496 Memory corruption in fisglobal:gt.m
- CVE-2021-44495 Null dereference in fisglobal:gt.m
- CVE-2021-44494 Null dereference in fisglobal:gt.m
- CVE-2021-44493 Integer overflow in fisglobal:gt.m
- CVE-2021-44492 Null dereference in fisglobal:gt.m
- CVE-2021-44491 Denial of service in fisglobal:gt.m
- CVE-2021-44490 Denial of service in fisglobal:gt.m
- CVE-2021-4449 ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
- CVE-2021-44489 Integer overflow in fisglobal:gt.m
- CVE-2021-44488 Memory corruption in fisglobal:gt.m
- CVE-2021-44487 Null dereference in fisglobal:gt.m
- CVE-2021-44486 Memory corruption in fisglobal:gt.m
- CVE-2021-44485 Null dereference in fisglobal:gt.m
- CVE-2021-44484 Null dereference in fisglobal:gt.m
- CVE-2021-44483 Denial of service in fisglobal:gt.m
- CVE-2021-44482 Null dereference in fisglobal:gt.m
- CVE-2021-44481 Null dereference in fisglobal:gt.m
- CVE-2021-44480 Hardcoded credentials in wokkalokka:wokka watch q50 firmware
- CVE-2021-4448 Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization
- CVE-2021-44479 Memory corruption in nxp:kinetis k82 firmware
- CVE-2021-44478 Cross-site scripting in Polarion ALM
- CVE-2021-44477 GE Gas Power ToolBoxST Improper Restriction of XML External Entity Reference
- CVE-2021-44476 Security feature bypass in Odoo Community