Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 72 of 273.
- CVE-2021-43971 SQL injection in sysaid:sysaid
- CVE-2021-43970 File upload in quicklert:quicklert
- CVE-2021-4397 Staff Directory Plugin <= 3.6 - Cross-Site Request Forgery Bypass
- CVE-2021-43969 SQL injection in quicklert:quicklert
- CVE-2021-43963 Information disclosure in couchbase:sync gateway
- CVE-2021-43961 Cross-site scripting in sonatype:nexus repository manager
- CVE-2021-43960 Cross-site scripting in lorensbergs:connect2
- CVE-2021-4396 Rucy <= 0.4.4 - Cross-Site Request Forgery Bypass
- CVE-2021-43959 Server-side request forgery in Jira Service Management Data Center
- CVE-2021-43958 Auth bypass in Crucible
- CVE-2021-43957 Path traversal in Crucible
- CVE-2021-43956 Cross-site scripting in Crucible
- CVE-2021-43955 Information disclosure in Crucible
- CVE-2021-43954 Server-side request forgery in Crucible
- CVE-2021-43953 Cross-site request forgery in Jira Data Center
- CVE-2021-43952 Cross-site request forgery in Jira Data Center
- CVE-2021-43951 Information disclosure in Jira Service Management Data Center
- CVE-2021-43950 Missing authorization in Jira Service Management Data Center
- CVE-2021-4395 Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass
- CVE-2021-43949 Missing authorization in Jira Service Management Data Center
- CVE-2021-43948 Missing authorization in Jira Service Management Data Center
- CVE-2021-43947 Code injection in Jira Data Center
- CVE-2021-43946 Missing authorization in Jira Data Center
- CVE-2021-43945 Cross-site scripting in Jira Data Center
- CVE-2021-43944 Code injection in Jira Data Center
- CVE-2021-43943 Cross-site scripting in Jira Service Management Data Center
- CVE-2021-43942 Cross-site scripting in Jira Data Center
- CVE-2021-43941 Cross-site request forgery in Jira Data Center
- CVE-2021-43940 Privilege escalation in Confluence Data Center
- CVE-2021-4394 Locations <= 3.2.1 - Cross-Site Request Forgery Bypass
- CVE-2021-43939 Elcomplus SmartPtt Improper Authorization
- CVE-2021-43938 Elcomplus SmartPTT SCADA Server Information Exposure
- CVE-2021-43937 Elcomplus SmartPTT SCADA Server Cross-site Request Forgery
- CVE-2021-43936 Distributed Data Systems WebHM
- CVE-2021-43935 ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products
- CVE-2021-43934 Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Type
- CVE-2021-43933 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
- CVE-2021-43932 Elcomplus SmartPtt Cross-site Scripting
- CVE-2021-43931 Distributed Data Systems WebHM
- CVE-2021-43930 Elcomplus SmartPtt Path Traversal
- CVE-2021-4393 eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass
- CVE-2021-43929 Cross-site scripting in DiskStation Manager (DSM)
- CVE-2021-43928 Command injection in Mail Station
- CVE-2021-43927 SQL injection in DiskStation Manager (DSM)
- CVE-2021-43926 SQL injection in DiskStation Manager (DSM)
- CVE-2021-43925 SQL injection in DiskStation Manager (DSM)
- CVE-2021-4392 eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
- CVE-2021-4391 Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass
- CVE-2021-43908 Visual Studio Code Spoofing Vulnerability
- CVE-2021-43907 Visual Studio Code WSL Extension Remote Code Execution Vulnerability
- CVE-2021-43905 Microsoft Office app Remote Code Execution Vulnerability
- CVE-2021-4390 Contact Form 7 Style <= 3.2 - Cross-Site Request Forgery Bypass
- CVE-2021-43899 Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability
- CVE-2021-43896 Microsoft PowerShell Spoofing Vulnerability
- CVE-2021-43893 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
- CVE-2021-43892 Microsoft BizTalk ESB Toolkit Spoofing Vulnerability
- CVE-2021-43891 Visual Studio Code Remote Code Execution Vulnerability
- CVE-2021-43890 Microsoft Windows AppX Installer Spoofing
- CVE-2021-4389 WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass
- CVE-2021-43889 Microsoft Defender for IoT Remote Code Execution Vulnerability
- CVE-2021-43888 Microsoft Defender for IoT Information Disclosure Vulnerability
- CVE-2021-43883 Windows Installer Elevation of Privilege Vulnerability
- CVE-2021-43882 Microsoft Defender for IoT Remote Code Execution Vulnerability
- CVE-2021-43880 Windows Mobile Device Management Elevation of Privilege Vulnerability
- CVE-2021-4388 Opal Estate <= 1.6.11 - Missing Authorization
- CVE-2021-43877 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- CVE-2021-43876 Microsoft SharePoint Elevation of Privilege Vulnerability
- CVE-2021-43875 Microsoft Office Graphics Remote Code Execution Vulnerability
- CVE-2021-4387 Opal Estate <= 1.6.11 - Cross-Site Request Forgery Bypass
- CVE-2021-43863 SQL Injection in FileContentProvider (GHSL-2021-1007)
- CVE-2021-43862 Self XSS on user input
- CVE-2021-43861 Incorrect sanitisation function leads to `XSS`
- CVE-2021-43860 Permissions granted to applications can be hidden from the user at install time
- CVE-2021-4386 WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass
- CVE-2021-43859 Denial of Service by injecting highly recursive collections or maps in XStream
- CVE-2021-43858 User privilege escalation in MinIO
- CVE-2021-43857 Gerapy may contain remote code execution vulnerability
- CVE-2021-43856 Stored XSS in non-image uploads in Requarks/wiki
- CVE-2021-43855 Stored XSS via SVG in Requarks/wiki
- CVE-2021-43854 Inefficient Regular Expression Complexity in nltk
- CVE-2021-43853 Cross-Site Scripting in AjaxNetProfessional
- CVE-2021-43852 JavaScript Prototype Pollution in oro/platform
- CVE-2021-43851 SQL injection vulnerability in anuko timetracker
- CVE-2021-43850 Denial of Service in discourse
- CVE-2021-4385 WP Private Content Plus <= 3.1 - Cross-Site Request Forgery Bypass
- CVE-2021-43849 DoS vulnerability
- CVE-2021-43848 Unititialized memory access in h2o
- CVE-2021-43847 Authorization Bypass in Space Invite in HumHub
- CVE-2021-43846 CSRF forgery protection bypass for Spree::OrdersController#populate
- CVE-2021-43845 Prevent out-of-bounds read in PJSIP
- CVE-2021-43844 Externally Controlled Reference to a Resource in Another Sphere in MSEdgeRedirect
- CVE-2021-43843 Insufficient patch for Regular Expression Denial of Service (ReDoS) to jsx-slack v4.5.1
- CVE-2021-43842 Stored XSS via SVG file upload in Wiki.js
- CVE-2021-43841 XSS by SVG upload in xwiki-platform
- CVE-2021-43840 Path traversal in message_bus
- CVE-2021-4384 WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass
- CVE-2021-43839 Drainage of FeeCollector's Block Transaction Fees
- CVE-2021-43838 Regular Expression Denial of Service (ReDoS) in jsx-slack
- CVE-2021-43837 Template injection in vault-cli
- CVE-2021-43836 PHP file inclusion in the Sulu admin panel