Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 73 of 273.
- CVE-2021-43835 Privilege escalation in the Sulu Admin panel
- CVE-2021-43834 Incorrect Authentication in elabftw
- CVE-2021-43833 Account takeover in eLabFTW
- CVE-2021-43832 Improper Access Control in spinnaker
- CVE-2021-43831 Files on the host computer can be accessed from the Gradio interface
- CVE-2021-43830 SQL injection in OpenProject
- CVE-2021-4383 WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content Injection
- CVE-2021-43829 Unrestricted Upload of Files in Patrowl
- CVE-2021-43828 Improper Privilege Management in Patrowl
- CVE-2021-43827 Inline footnotes wrapped in <a> tags can cause errors in discourse-footnotes
- CVE-2021-43826 Crash when tunneling TCP over HTTP in Envoy
- CVE-2021-43825 Use-after-free in Envoy
- CVE-2021-43824 Null pointer dereference in envoy
- CVE-2021-43823 Side-channel attack in Sourcegraph
- CVE-2021-43822 SQL injection in jackalope/jackalope-doctrine-dbal
- CVE-2021-43821 Files Accessible to External Parties in Opencast
- CVE-2021-43820 Permissions check bypass in Seafile
- CVE-2021-4382 Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution
- CVE-2021-43819 Stargate-Bukkit improperly handles vehicles causing data duplication.
- CVE-2021-43818 HTML Cleaner allows crafted and SVG embedded scripts to pass through
- CVE-2021-43817 Reflected Cross-Site-Scripting vulnerability in Collabora Online
- CVE-2021-43816 Improper Preservation of Permissions in containerd
- CVE-2021-43815 Grafana directory traversal for `.cvs` files
- CVE-2021-43814 Heap-based OOB write when parsing dwarf DIE info in Rizin
- CVE-2021-43813 Directory Traversal in Grafana
- CVE-2021-43812 Open redirect in nextjs-auth0
- CVE-2021-43811 Code injection via unsafe YAML loading
- CVE-2021-43810 Cross-site Scripting (XSS) when redirect an url
- CVE-2021-4381 uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
- CVE-2021-43809 Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile
- CVE-2021-43808 Blade `@parent` Exploitation Leading To Possible XSS in Laravel
- CVE-2021-43807 HTTP Method Spoofing in Opencast
- CVE-2021-43806 SQL injection in Tuleap
- CVE-2021-43805 ReDos vulnerability on guest checkout email validation
- CVE-2021-43804 Out-of-bounds read when parsing RTCP BYE message in PJSIP
- CVE-2021-43803 Unexpected server crash in Next.js
- CVE-2021-43802 Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports
- CVE-2021-43801 Uncaught Exception in mercurius
- CVE-2021-43800 Asset directory traversal with some storage modules on Windows
- CVE-2021-4380 Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update
- CVE-2021-43799 RabbitMQ exposes ports with weak default secrets in Zulip Server
- CVE-2021-43798 Grafana Path Traversal
- CVE-2021-43797 HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
- CVE-2021-43795 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria
- CVE-2021-43794 Anonymous user cache poisoning via development-mode header in Discourse
- CVE-2021-43793 Bypass of Poll voting limits in Discourse
- CVE-2021-43792 Notifications leak in Discourse
- CVE-2021-43791 Ineffective expiration validation for invitation links in Zulip
- CVE-2021-43790 Use After Free in lucet
- CVE-2021-4379 WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
- CVE-2021-43789 Blind SQLi using Search filters in PrestaShop
- CVE-2021-43788 Path traversal in translator module of NobeBB
- CVE-2021-43787 XSS via prototype pollution
- CVE-2021-43786 API token verification can be bypassed
- CVE-2021-43785 Cross Site Scripting Vulnerability in @joeattardi/emoji-button
- CVE-2021-43784 Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration
- CVE-2021-43783 Path Traversal in @backstage/plugin-scaffolder-backend
- CVE-2021-43782 Indirect LDAP injection in Tuleap
- CVE-2021-43781 Permissions not properly checked in Invenio-Drafts-Resources
- CVE-2021-43780 Server-Side Request Forgery (SSRF) in Redash
- CVE-2021-4378 WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2021-43779 Remote Command Execution vulnerability
- CVE-2021-43778 Path traversal in GLPI barcode plugin
- CVE-2021-43777 Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce)
- CVE-2021-43776 XSS vulnerability in @backstage/plugin-auth-backend
- CVE-2021-43775 Arbitrary file reading vulnerability in Aim
- CVE-2021-43774 Weak cryptography in fujifilm:apeosport-iv 2060 firmware
- CVE-2021-43772 Security feature bypass in Trend Micro Security 2021 (Consumer)
- CVE-2021-43771 Privilege escalation in Trend Micro Antivirus for MAC 2021
- CVE-2021-4377 Doneren met Mollie <= 2.8.4 - Information Disclosure
- CVE-2021-43768 In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface runn
- CVE-2021-43767 Security feature bypass in Odyssey
- CVE-2021-43766 SQL injection in Odyssey
- CVE-2021-43765 Adobe Experience Manager Stored XSS in the Carousel Set
- CVE-2021-43764 Adobe Experience Manager Stored XSS in the Spin Set
- CVE-2021-43763 Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-43762 Adobe Experience Manager Unicode normalization leads to dispatcher bypass
- CVE-2021-43761 Adobe Experience Manager Stored XSS on Edit Tag page via Localization input
- CVE-2021-43760 Adobe Media Encoder MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-4376 WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
- CVE-2021-43759 Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-43758 Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-43757 Adobe Media Encoder 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2021-43756 Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution
- CVE-2021-43755 Adobe After Effects Memory Corruption could lead to Arbitrary Code Execution
- CVE-2021-43754 Adobe Prelude Corruption could lead to Arbitrary code execution
- CVE-2021-43753 Adobe Lightroom TIF File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2021-43752 Adobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-43751 Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-43750 Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service
- CVE-2021-4375 Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
- CVE-2021-43749 Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service
- CVE-2021-43748 Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service
- CVE-2021-43747 Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution
- CVE-2021-43746 Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability
- CVE-2021-43745 Denial of service in trillium notes project:trillum notes
- CVE-2021-43742 Cross-site scripting in cmsimple:cmsimple
- CVE-2021-43741 Path traversal in cmsimple:cmsimple
- CVE-2021-4374 WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update
- CVE-2021-43738 Cross-site request forgery in xiaohuanxiong cms project:xiaohuanxiong cms