Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 76 of 273.
- CVE-2021-43454 Privilege escalation in anytxt:anytxt searcher
- CVE-2021-43453 Memory corruption in jerryscript:jerryscript
- CVE-2021-43451 SQL injection in phpgurukul:employee record management system
- CVE-2021-4345 uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
- CVE-2021-43449 Server-side request forgery in onlyoffice:server
- CVE-2021-43448 Other in onlyoffice:server
- CVE-2021-43447 Auth bypass in onlyoffice:server
- CVE-2021-43446 Cross-site scripting in onlyoffice:server
- CVE-2021-43445 Hardcoded credentials in onlyoffice:server
- CVE-2021-43444 Weak cryptography in onlyoffice:server
- CVE-2021-43442 Business logic in i3international:ax46 firmware
- CVE-2021-43441 Cross-site scripting in iorder project:iorder
- CVE-2021-43440 Cross-site scripting in iorder project:iorder
- CVE-2021-4344 Frontend File Manager <= 18.2 - Privilege Escalation
- CVE-2021-43439 Cross-site scripting in iresturant project:iresturant
- CVE-2021-43438 Cross-site scripting in iresturant project:iresturant
- CVE-2021-43437 Other in engineers online portal project:engineers online portal
- CVE-2021-43436 Cross-site scripting in iresturant project:iresturant
- CVE-2021-43432 Cross-site scripting in exrick:xmall
- CVE-2021-43430 File upload in bigantsoft:bigant office messenger 5
- CVE-2021-4343 uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
- CVE-2021-43429 Denial of service in seagate:cortx-s3 server
- CVE-2021-43421 elFinder Unrestricted File Upload vulnerability
- CVE-2021-43420 SQL injection in online payment hub project:online payment hub
- CVE-2021-43419 Information disclosure in opayweb:opay
- CVE-2021-43415 Improper Authentication in HashiCorp Nomad
- CVE-2021-43414 Auth bypass in gnu:hurd
- CVE-2021-43413 Privilege escalation in gnu:hurd
- CVE-2021-43412 Use after free in gnu:hurd
- CVE-2021-43411 Race condition in gnu:hurd
- CVE-2021-43410 airavata-django-portal allows CRLF log injection because of the lack of escaping in the log statements
- CVE-2021-4341 uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
- CVE-2021-43409 WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting
- CVE-2021-43408 Duplicate Post WordPress Plugin SQL Injection Vulnerability
- CVE-2021-43406 Other in fusionpbx:fusionpbx
- CVE-2021-43405 Other in fusionpbx:fusionpbx
- CVE-2021-43404 Other in fusionpbx:fusionpbx
- CVE-2021-43403 Path traversal in fusionpbx:fusionpbx
- CVE-2021-43400 Use after free in bluez:bluez
- CVE-2021-4340 uListing <= 1.6.6 - Unauthenticated SQL Injection
- CVE-2021-43399 Memory corruption in yubico:yubihsm 2 software development kit
- CVE-2021-43398 Weak cryptography in cryptopp:crypto\+\+
- CVE-2021-43397 Privilege escalation in liquidfiles:liquidfiles
- CVE-2021-43396 Other in gnu:glibc
- CVE-2021-43395 Denial of service in illumos:illumos
- CVE-2021-43394 Auth bypass in unisys:messaging integration services
- CVE-2021-43393 Weak cryptography in st:j-safe3 firmware
- CVE-2021-43392 Weak cryptography in st:j-safe3 firmware
- CVE-2021-43391 Memory corruption in opendesign:drawings software development kit
- CVE-2021-43390 Memory corruption in opendesign:drawings software development kit
- CVE-2021-4339 uListing <= 1.6.6 - Unauthenticated Information Disclosure
- CVE-2021-43389 Memory corruption in debian:debian linux
- CVE-2021-43388 Information disclosure in unisys:cargo mobile
- CVE-2021-4338 404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation
- CVE-2021-4337 Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization
- CVE-2021-43362 MedData HBYS 1.0 Remote SQL Injection Vulnerability
- CVE-2021-43361 MedData HBYS 1.0 Remote SQL Injection Vulnerability
- CVE-2021-43360 Sunnet eHRD - Insecure Deserialization
- CVE-2021-4336 ITRS Group monitor-ninja scheduled_reports.php sql injection
- CVE-2021-43359 Sunnet eHRD - Broken Access Control
- CVE-2021-43358 Sunnet eHRD - Path Traversal
- CVE-2021-43355 Fresenius Kabi Agilia Connect Infusion System use of client side authentication
- CVE-2021-43353 Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-43350 LDAP filter injection vulnerability in Traffic Ops
- CVE-2021-4335 Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions
- CVE-2021-4334 Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options
- CVE-2021-43339 Command injection in ericsson:network location
- CVE-2021-43337 Missing authorization in fedoraproject:fedora
- CVE-2021-43336 Memory corruption in opendesign:drawings software development kit
- CVE-2021-43334 Cross-site scripting in buddyboss:buddyboss
- CVE-2021-43333 Missing authorization in datalogic:dxu
- CVE-2021-43332 Weak cryptography in debian:debian linux
- CVE-2021-43331 Cross-site scripting in debian:debian linux
- CVE-2021-4333 WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation
- CVE-2021-43329 SQL injection in mumara:classic
- CVE-2021-43327 Security feature bypass in renesas:rx65 firmware
- CVE-2021-43326 Misconfiguration in automox:automox
- CVE-2021-43325 Misconfiguration in automox:automox
- CVE-2021-43324 Cross-site Scripting in LibreNMS
- CVE-2021-43323 Privilege escalation in insyde:insydeh2o
- CVE-2021-4332 Path traversal in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
- CVE-2021-43319 Command injection in zohocorp:manageengine network configuration manager
- CVE-2021-43317 Memory corruption in upx
- CVE-2021-43316 Memory corruption in upx
- CVE-2021-43315 Memory corruption in upx
- CVE-2021-43314 Memory corruption in upx
- CVE-2021-43313 Memory corruption in upx
- CVE-2021-43312 Memory corruption in upx
- CVE-2021-43311 Memory corruption in upx
- CVE-2021-43310 Auth bypass in keylime
- CVE-2021-4331 Privilege escalation in The Plus Addons for Elementor Page Builder Pro
- CVE-2021-43309 ReDoS in uri-template-lite URI.expand function
- CVE-2021-43308 Exponential ReDoS in markdown-link-extractor
- CVE-2021-43307 Exponential ReDoS in semver-regex
- CVE-2021-43306 Exponential ReDoS in jquery-validation
- CVE-2021-43305 Memory corruption in clickhouse
- CVE-2021-43304 Memory corruption in clickhouse
- CVE-2021-43303 Memory corruption in pjsip
- CVE-2021-43302 Memory corruption in pjsip
- CVE-2021-43301 Memory corruption in pjsip