Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 75 of 273.
- CVE-2021-43578 Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files
- CVE-2021-43577 XXE vulnerability in Jenkins OWASP Dependency-Check Plugin
- CVE-2021-43576 XXE vulnerability in Jenkins pom2config Plugin
- CVE-2021-43575 Hardcoded credentials in knx:engineering tool software 6
- CVE-2021-43574 Cross-site scripting in atmail:atmail
- CVE-2021-43573 Memory corruption in realtek:rtl8195am firmware
- CVE-2021-43572 Improper Verification of Cryptographic Signature in starkbank-ecdsa
- CVE-2021-43571 Improper Verification of Cryptographic Signature in starkbank-ecdsa
- CVE-2021-43570 Improper Verification of Cryptographic Signature in starkbank-ecdsa
- CVE-2021-4357 uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
- CVE-2021-43569 Improper Verification of Cryptographic Signature in starkbank-ecdsa
- CVE-2021-43568 ecdsa-elixir fails to check signatures, vulnerable to message forging
- CVE-2021-43566 Race condition in samba:samba
- CVE-2021-43565 x/crypto/ssh vulnerable to panic via malformed packets
- CVE-2021-43564 Unrestricted access to predictable file paths in hov/jobfair
- CVE-2021-43563 Missing authorization in pixxio:pixx.io
- CVE-2021-43562 Server-side request forgery in pixxio:pixx.io
- CVE-2021-43561 Cross-site Scripting in pegasus/google-for-jobs
- CVE-2021-43560 Moodle Insecure direct object reference (IDOR) in a calendar web service
- CVE-2021-4356 Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download
- CVE-2021-43559 Moodle contains CSRF vulnerability
- CVE-2021-43558 Cross-site Scripting in moodle
- CVE-2021-43557 Path traversal in request_uri variable
- CVE-2021-43556 FATEK Automation WinProladder
- CVE-2021-43555 mySCADA myDESIGNER
- CVE-2021-43554 FATEK Automation WinProladder
- CVE-2021-43553 OSIsoft PI Vision
- CVE-2021-43552 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key
- CVE-2021-43551 OSIsoft PI Vision
- CVE-2021-43550 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm
- CVE-2021-4355 Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
- CVE-2021-43549 OSIsoft PI Web API
- CVE-2021-43548 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation
- CVE-2021-43547 TwinOaks Computing CoreDX DDS Secure Network Amplification
- CVE-2021-43546 Other in Firefox
- CVE-2021-43545 Denial of service in Firefox
- CVE-2021-43544 Cross-site scripting in Firefox
- CVE-2021-43543 Cross-site scripting in Firefox
- CVE-2021-43542 Information disclosure in Firefox
- CVE-2021-43541 Other in Firefox
- CVE-2021-43540 Security feature bypass in Firefox
- CVE-2021-4354 PWA for WP & AMP <= 1.7.32 - Arbitrary File Upload
- CVE-2021-43539 Use after free in Firefox
- CVE-2021-43538 Race condition in Firefox
- CVE-2021-43537 Integer overflow in Firefox
- CVE-2021-43536 Information disclosure in Firefox
- CVE-2021-43535 Use after free in Firefox
- CVE-2021-43534 Memory corruption in Firefox
- CVE-2021-43533 Other in Firefox
- CVE-2021-43532 Open redirect in Firefox
- CVE-2021-43531 Information disclosure in Firefox
- CVE-2021-43530 Cross-site scripting in Firefox
- CVE-2021-4353 WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
- CVE-2021-43529 Memory corruption in Thunderbird
- CVE-2021-43528 Privilege escalation in Thunderbird
- CVE-2021-43527 Memory corruption in NSS
- CVE-2021-43523 Other in uclibc-ng project:uclibc-ng
- CVE-2021-43522 Memory corruption in insyde:insydeh2o
- CVE-2021-43521 Memory corruption in zlog project:zlog
- CVE-2021-4352 JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Settings Change
- CVE-2021-43519 Denial of service in fedoraproject:fedora
- CVE-2021-43518 Memory corruption in fedoraproject:fedora
- CVE-2021-43517 Hardcoded credentials in foscam:fi9805e firmware
- CVE-2021-43515 Improper Neutralization of Formula Elements in a CSV File in Kimai 2
- CVE-2021-43512 Information disclosure in flightradar24:flightradar24 flight tracker
- CVE-2021-43510 SQL injection in simple client management system project:simple client management system
- CVE-2021-4351 Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change
- CVE-2021-43509 SQL injection in simple client management system project:simple client management system
- CVE-2021-43506 SQL injection in simple client management system project:simple client management system
- CVE-2021-43505 Cross-site scripting in simple client management system project:simple client management system
- CVE-2021-4350 Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails
- CVE-2021-43498 Missing authorization in atutor:atutor
- CVE-2021-43496 Path traversal in clustering project:clustering
- CVE-2021-43495 Path traversal in alquistai:alquist
- CVE-2021-43494 Path traversal in codingforentrepreneurs:opencv rest api
- CVE-2021-43493 Path traversal in servermanagement project:servermanagement
- CVE-2021-43492 Path traversal in alquistai:alquist
- CVE-2021-4349 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery
- CVE-2021-43484 File upload in simple client management system project:simple client management system
- CVE-2021-43483 Missing authorization in claro:kaon cg3000 firmware
- CVE-2021-43481 SQL injection in webtareas project:webtareas
- CVE-2021-4348 Ultimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export
- CVE-2021-43479 Code injection in secretarycms:the secretary
- CVE-2021-43478 Misconfiguration in hoosk:hoosk
- CVE-2021-43474 Missing authorization in dlink:dir-823g firmware
- CVE-2021-43471 Auth bypass in canon:lbp223dw firmware
- CVE-2021-4347 Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
- CVE-2021-43469 Command injection in vinga:wr-n300u firmware
- CVE-2021-43466 Template injection in thymeleaf-spring5
- CVE-2021-43464 Remote code execution in Subrion
- CVE-2021-43463 Privilege escalation in ext2 file system driver project:ext2 file system driver
- CVE-2021-43462 Cross-site scripting in rumble mail server project:rumble mail server
- CVE-2021-43461 Cross-site scripting in rumble mail server project:rumble mail server
- CVE-2021-43460 Privilege escalation in systemexplorer:system explorer
- CVE-2021-4346 uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
- CVE-2021-43459 Cross-site scripting in rumble mail server project:rumble mail server
- CVE-2021-43458 Privilege escalation in vembu:bdr suite
- CVE-2021-43457 Privilege escalation in bvpn:bvpn
- CVE-2021-43456 Privilege escalation in rumble mail server project:rumble mail server
- CVE-2021-43455 Privilege escalation in freelan:freelan