Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 71 of 273.
- CVE-2021-4409 WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass
- CVE-2021-44088 SQL injection in attendance and payroll system project:attendance and payroll system
- CVE-2021-44087 File upload in attendance and payroll system project:attendance and payroll system
- CVE-2021-44082 Cross-site scripting in textpattern:textpattern
- CVE-2021-44081 Memory corruption in open5gs:open5gs
- CVE-2021-44080 Command injection in sercomm:h500s firmware
- CVE-2021-4408 DW Question & Answer <= 1.5.8 - Cross-Site Request Forgery Bypass
- CVE-2021-44079 Command injection in wazuh:wazuh
- CVE-2021-44078 Memory corruption in unicorn-engine:unicorn engine
- CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution
- CVE-2021-44076 Cross-site scripting in crushftp:crushftp
- CVE-2021-4407 Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass
- CVE-2021-4406 Authenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others
- CVE-2021-44057 Improper authentication in Photo Station
- CVE-2021-44056 Improper authentication in Video Station
- CVE-2021-44055 Information leakage in Video Station
- CVE-2021-44054 Open redirect
- CVE-2021-44053 Reflected XSS
- CVE-2021-44052 Arbitrary file read
- CVE-2021-44051 Command injection
- CVE-2021-44050 SQL injection in CA Network Flow Analysis (NFA)
- CVE-2021-4405 ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass
- CVE-2021-44049 Privilege escalation in cyberark:endpoint privilege manager
- CVE-2021-44048 Memory corruption in opendesign:drawings explorer
- CVE-2021-44047 Use after free in opendesign:drawings sdk
- CVE-2021-44046 Memory corruption in opendesign:prc sdk
- CVE-2021-44045 Memory corruption in opendesign:drawings sdk
- CVE-2021-44044 Memory corruption in opendesign:drawings sdk
- CVE-2021-44043 Cross-site scripting in uipath:app studio
- CVE-2021-44042 Cross-site scripting in uipath:assistant
- CVE-2021-44041 Code injection in uipath:assistant
- CVE-2021-44040 HTTP request line fuzzing attacks
- CVE-2021-4404 Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypass
- CVE-2021-44038 Privilege escalation in quagga:quagga
- CVE-2021-44037 Business logic in teampasswordmanager:team password manager
- CVE-2021-44036 Cross-site request forgery in teampasswordmanager:team password manager
- CVE-2021-44035 File upload in wolterskluwer:teammate audit management
- CVE-2021-44033 Security feature bypass in ionic:identity vault
- CVE-2021-44032 Auth bypass in tp-link:omada software controller
- CVE-2021-44031 File upload in quest:kace desktop authority
- CVE-2021-44030 Cross-site scripting in quest:kace desktop authority
- CVE-2021-4403 Remove Schema <= 1.5 - Cross-Site Request Forgery Bypass
- CVE-2021-44029 Deserialization in quest:kace desktop authority
- CVE-2021-44028 XML external entity in quest:kace desktop authority
- CVE-2021-44026 Roundcube Webmail SQL Injection
- CVE-2021-44025 Cross-site scripting in debian:debian linux
- CVE-2021-44024 Path traversal in Trend Micro Apex One
- CVE-2021-44023 Path traversal in Trend Micro Security (Consumer)
- CVE-2021-44022 Denial of service in Trend Micro Apex One
- CVE-2021-44021 Privilege escalation in Trend Micro Worry-Free Business Security
- CVE-2021-44020 Privilege escalation in Trend Micro Worry-Free Business Security
- CVE-2021-4402 Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass
- CVE-2021-44019 Privilege escalation in Trend Micro Worry-Free Business Security
- CVE-2021-44018 Memory corruption in JT2Go
- CVE-2021-44017 Memory corruption in JT2Go
- CVE-2021-44016 Memory corruption in JT2Go
- CVE-2021-44015 Memory corruption in JT2Go
- CVE-2021-44014 Use after free in JT Open
- CVE-2021-44013 Memory corruption in JT2Go
- CVE-2021-44012 Memory corruption in JT2Go
- CVE-2021-44011 Memory corruption in JT2Go
- CVE-2021-44010 Memory corruption in JT2Go
- CVE-2021-4401 Style Kits <= 1.8.0 - Cross-Site Request Forgery Bypass
- CVE-2021-44009 Memory corruption in JT2Go
- CVE-2021-44008 Memory corruption in JT2Go
- CVE-2021-44007 Memory corruption in JT2Go
- CVE-2021-44006 Memory corruption in JT2Go
- CVE-2021-44005 Memory corruption in JT2Go
- CVE-2021-44004 Memory corruption in JT2Go
- CVE-2021-44003 Memory corruption in JT2Go
- CVE-2021-44002 Memory corruption in JT Open
- CVE-2021-44001 Memory corruption in JT2Go
- CVE-2021-44000 Memory corruption in JT2Go
- CVE-2021-4400 Better Search <= 2.5.2 - Cross-Site Request Forgery Bypass
- CVE-2021-43999 Improper validation of SAML responses
- CVE-2021-43998 HashiCorp Vault Incorrect Permission Assignment for Critical Resource
- CVE-2021-43997 Privilege escalation in amazon:freertos
- CVE-2021-43996 Incorrect Access Control in Ignition
- CVE-2021-43991 Persistent XSS via Avatar Upload in Kentico Xperience CMS
- CVE-2021-43990 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
- CVE-2021-4399 Edwiser Bridge <= 2.0.6 - Cross-Site Request Forgery Bypass
- CVE-2021-43989 mySCADA myPRO
- CVE-2021-43988 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
- CVE-2021-43987 mySCADA myPRO
- CVE-2021-43986 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
- CVE-2021-43985 mySCADA myPRO
- CVE-2021-43984 mySCADA myPRO
- CVE-2021-43983 WECON LeviStudioU
- CVE-2021-43982 Delta Electronics CNCSoft
- CVE-2021-43981 mySCADA myPRO
- CVE-2021-43980 Apache Tomcat: Information disclosure
- CVE-2021-4398 Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypass
- CVE-2021-43979 Race condition in openpolicyagent:gatekeeper
- CVE-2021-43978 Hardcoded credentials in allegro:allegro
- CVE-2021-43977 Cross-site scripting in smartertools:smartermail
- CVE-2021-43976 Denial of service in debian:debian linux
- CVE-2021-43975 Memory corruption in debian:debian linux
- CVE-2021-43974 Auth bypass in sysaid:itil
- CVE-2021-43973 File upload in sysaid:sysaid
- CVE-2021-43972 Path traversal in sysaid:sysaid