Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 74 of 273.
- CVE-2021-43737 Cross-site request forgery in xiaohuanxiong project:xiaohuanxiong cms
- CVE-2021-43736 Command injection in cmswing:cmswing
- CVE-2021-43735 SQL injection in cmswing:cmswing
- CVE-2021-43734 Path traversal in keking:kkfileview
- CVE-2021-4373 Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import
- CVE-2021-43729 Cross-site scripting in pix-link:lv-wr09 firmware
- CVE-2021-43728 Cross-site scripting in pix-link:lv-wr09 firmware
- CVE-2021-43725 Cross-site scripting in spotweb project:spotweb
- CVE-2021-43724 Cross-site scripting in intelliants:subrion cms
- CVE-2021-43722 Memory corruption in dlink:dir-645 firmware
- CVE-2021-43721 Cross-site scripting in leanote:leanote
- CVE-2021-4372 WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
- CVE-2021-43718 An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Den
- CVE-2021-43717 An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6.
- CVE-2021-43716 Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20.
- CVE-2021-43712 Cross-site scripting in employee daily task management system project:employee daily task management system
- CVE-2021-43711 Command injection in totolink:ex200 firmware
- CVE-2021-4371 WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change
- CVE-2021-43708 Security feature bypass in helpsystems:titus data classification
- CVE-2021-43707 Cross-site scripting in maccms:maccms
- CVE-2021-43703 Auth bypass in zzcms:zzcms
- CVE-2021-43702 Cross-site scripting in asus:4g-ac53u firmware
- CVE-2021-43701 SQL injection in cszcms:csz cms
- CVE-2021-43700 SQL injection in apimanager project:apimanager
- CVE-2021-4370 uListing <= 1.6.6 - Missing Authorization
- CVE-2021-43698 Cross-site scripting in phpwhois project:phpwhois
- CVE-2021-43697 Cross-site scripting in workerman-thinkphp-redis project:workerman-thinkphp-redis
- CVE-2021-43696 Cross-site scripting in twmap project:twmap
- CVE-2021-43695 Cross-site scripting in issabel:pbx
- CVE-2021-43693 Path traversal in vestacp:vesta control panel
- CVE-2021-43692 Cross-site scripting in youtube-php-mirroring project:youtube-php-mirroring
- CVE-2021-43691 Path traversal in tripexpress project:tripexpress
- CVE-2021-43690 Cross-site scripting in yurunproxy project:yurunproxy
- CVE-2021-4369 Frontend File Manager <= 18.2 - Unauthenticated Content Injection
- CVE-2021-43689 Cross-site scripting in manage project:manage
- CVE-2021-43687 Cross-site scripting in chamilo:chamilo
- CVE-2021-43686 Cross-site scripting in nzedb project:nzedb
- CVE-2021-43685 Path traversal in libretime:libretime hv
- CVE-2021-43683 Cross-site scripting in haschek:pictshare
- CVE-2021-43682 Cross-site scripting in thinkphp-bjyblog project:thinkphp-bjyblog
- CVE-2021-43681 Cross-site scripting in zerodream:sakurapanel
- CVE-2021-4368 Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload
- CVE-2021-43679 SQL injection in shopex:ecshop
- CVE-2021-43678 Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.
- CVE-2021-43677 Cross-site scripting in fluxbb:fluxbb
- CVE-2021-43676 Path manipulation in matyhtf/framework
- CVE-2021-43675 Cross-site scripting in lycheeorg:lychee
- CVE-2021-43674 Path traversal in thinkupapp:thinkup
- CVE-2021-43673 Cross-site scripting in dzzoffice:dzzoffice
- CVE-2021-4367 Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting
- CVE-2021-43669 HTTP Request Smuggling in github.com/hyperledger/fabric
- CVE-2021-43668 Denial of Service in Go-Ethereum
- CVE-2021-43667 NULL Pointer Dereference in HyperLedger Fabric
- CVE-2021-43666 Denial of service in arm:mbed tls
- CVE-2021-43664 Command injection in totolink:ex300 v2 firmware
- CVE-2021-43663 Command injection in totolink:ex300 v2 firmware
- CVE-2021-43662 Denial of service in totolink:a720r firmware
- CVE-2021-43661 Cross-site scripting in totolink:ex300 v2 firmware
- CVE-2021-4366 PWA for WP & AMP < = 1.7.32 - Missing Authorization
- CVE-2021-43659 File upload in halo:halo
- CVE-2021-43657 Cross-site scripting in simple client management system project:simple client management system
- CVE-2021-43650 SQL injection in softwell:webrun
- CVE-2021-4365 Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting
- CVE-2021-4364 JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function
- CVE-2021-43638 Integer overflow in amazon:workspaces
- CVE-2021-43637 Memory corruption in amazon:workspaces
- CVE-2021-43636 Memory corruption in totolink:t10 v2 firmware
- CVE-2021-43635 Cross-site scripting in codexnotes:codex
- CVE-2021-43633 Cross-site scripting in messaging web application project:messaging web application
- CVE-2021-43631 SQL injection in projectworlds:hospital management system in php
- CVE-2021-43630 SQL injection in projectworlds:hospital management system in php
- CVE-2021-4363 WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting
- CVE-2021-43629 SQL injection in projectworlds:hospital management system in php
- CVE-2021-43628 SQL injection in projectworlds:hospital management system in php
- CVE-2021-43620 Improper Input Validation in fruity
- CVE-2021-4362 Missing authorization in Social Sharing Plugin – Kiwi
- CVE-2021-43619 Memory corruption in trustedfirmware:trusted firmware-m
- CVE-2021-43618 Integer overflow in debian:debian linux
- CVE-2021-43617 File upload in laravel:framework
- CVE-2021-43616 Security feature bypass in fedoraproject:fedora
- CVE-2021-43615 Memory corruption in insyde:insydeh2o
- CVE-2021-43614 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution
- CVE-2021-43613 SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege
- CVE-2021-43612 Memory corruption in fedoraproject:fedora
- CVE-2021-43611 Denial of service in linphone:belle-sip
- CVE-2021-43610 Denial of service in linphone:belle-sip
- CVE-2021-4361 JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Arbitrary Options Update
- CVE-2021-43609 SQL injection in spiceworks:help desk server
- CVE-2021-43608 DBAL 3 SQL Injection Security Vulnerability
- CVE-2021-4360 Controlled Admin Access < 1.5.6 - Privilege Escalation
- CVE-2021-43590 Information disclosure in Dell EMC Enterprise Storage Analytics for vRealize Operations
- CVE-2021-4359 Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion
- CVE-2021-43589 Command injection in Unity
- CVE-2021-43588 Denial of service in Data Protection Central
- CVE-2021-43587 Hardcoded credentials in PowerPath Management Appliance
- CVE-2021-43584 Cross-site scripting in nagios:nagios cross platform agent
- CVE-2021-43582 Use after free in opendesign:drawings sdk
- CVE-2021-43581 Memory corruption in opendesign:prc sdk
- CVE-2021-4358 WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site Scripting
- CVE-2021-43579 Memory corruption in debian:debian linux