Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 80 of 273.
- CVE-2021-42890 Command injection in totolink:ex1200t firmware
- CVE-2021-4289 OpenMRS openmrs-module-referenceapplication User App Page UserAppPageController.java post cross site scripting
- CVE-2021-42889 Missing authorization in totolink:ex1200t firmware
- CVE-2021-42888 Command injection in totolink:ex1200t firmware
- CVE-2021-42887 Auth bypass in totolink:ex1200t firmware
- CVE-2021-42886 Information disclosure in totolink:ex1200t firmware
- CVE-2021-42885 Command injection in totolink:ex1200t firmware
- CVE-2021-42884 Command injection in totolink:ex1200t firmware
- CVE-2021-4288 OpenMRS openmrs-module-referenceapplication userApp.gsp cross site scripting
- CVE-2021-42877 Denial of service in totolink:ex1200t firmware
- CVE-2021-42875 Command injection in totolink:ex1200t firmware
- CVE-2021-42872 Command injection in totolink:ex1200t firmware
- CVE-2021-42870 Memory corruption in accel-ppp:accel-ppp
- CVE-2021-4287 ReFirm Labs binwalk Archive Extraction extractor.py symlink
- CVE-2021-42869 Cross-site scripting in chikitsa:patient management software
- CVE-2021-42868 Cross-site scripting in chikitsa:patient management software
- CVE-2021-42867 Cross-site scripting in htmly:htmly
- CVE-2021-42866 Cross-site scripting in pixelimity:pixelimity
- CVE-2021-42863 Memory corruption in jerryscript:jerryscript
- CVE-2021-42860 Memory corruption in mini-xml project:mini-xml
- CVE-2021-4286 cocagne pysrp _ctsrp.py calculate_x information exposure
- CVE-2021-42859 Denial of service in mini-xml project:mini-xml
- CVE-2021-42857 Directory Traversal Partial Write at AgentDaServlet
- CVE-2021-42856 Reflected Cross-site Scripting at DsaDataTest
- CVE-2021-42855 Local privilege escalation due to misconfigured write permission on .debug_command.config file
- CVE-2021-42854 Directory Traversal Read/Write/Delete at PluginServlet
- CVE-2021-42853 Directory Traversal Delete/Read at AgentDiagnosticServlet
- CVE-2021-42852 Command injection in Personal Cloud Storage A1
- CVE-2021-42851 Missing authorization in Personal Cloud Storage A1
- CVE-2021-42850 Hardcoded credentials in Personal Cloud Storage A1
- CVE-2021-4285 Nagios NCPA tail.html cross site scripting
- CVE-2021-42849 Hardcoded credentials in Personal Cloud Storage A1
- CVE-2021-42848 Missing authorization in Personal Cloud Storage A1
- CVE-2021-42847 File upload in zohocorp:manageengine adaudit plus
- CVE-2021-42841 Cross-site scripting in practo:insta hms
- CVE-2021-42840 File upload in salesagility:suitecrm
- CVE-2021-4284 OpenMRS HTML Form Entry UI Framework Integration Module cross site scripting
- CVE-2021-42839 Grand Vice info Co. webopac7 - Arbitrary File Upload
- CVE-2021-42838 Grand Vice info Co. webopac7 - Reflected XSS
- CVE-2021-42837 Auth bypass in talend:data catalog
- CVE-2021-42836 Duplicate Advisory: ReDoS via crafted JSON input in GJSON
- CVE-2021-42835 Race condition in plex:media server
- CVE-2021-42833 Use of hardcoded credentials impacting AquaView versions 1.60, 7.x, 8.x
- CVE-2021-4283 FreeBPX voicemail Settings ssettings.php cross site scripting
- CVE-2021-4282 FreePBX voicemail page.voicemail.php cross site scripting
- CVE-2021-42811 Vulnerability in SafeNet KeySecure
- CVE-2021-42810 Privilege escalation in SafeNet Authentication Service
- CVE-2021-4281 Brave UX for-the-badge combine-prs.yml os command injection
- CVE-2021-42809 The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library
- CVE-2021-42808 Privilege escalation in Sentinel Protection Installer
- CVE-2021-4280 styler_praat_scripts Slash file_segmenter.praat denial of service
- CVE-2021-42797 Path traversal in aveva:edge
- CVE-2021-42796 Command injection in aveva:edge
- CVE-2021-42794 Server-side request forgery in aveva:edge
- CVE-2021-42791 Missing authorization in veridiumid:veridiumad
- CVE-2021-4279 Starcounter-Jack JSON-Patch prototype pollution
- CVE-2021-42787 Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet
- CVE-2021-42786 Remote Code Execution at AgentControllerServlet
- CVE-2021-42785 Buffer Overflow in tvnviewer.exe via Crafted Packet in TightVNC Viewer 2.8.59
- CVE-2021-42784 OS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.4
- CVE-2021-42783 Missing Authentication in debug_post_set.cgi in D-Link DWR-932C E1 Firmware 1.0.0.4
- CVE-2021-42782 Memory corruption in opensc
- CVE-2021-42781 Memory corruption in opensc
- CVE-2021-42780 Use after free in opensc
- CVE-2021-4278 cronvel tree-kit prototype pollution
- CVE-2021-42779 Use after free in opensc
- CVE-2021-42778 Memory corruption in opensc
- CVE-2021-42777 Code injection in stimulsoft:reports
- CVE-2021-42776 XML external entity in cloverdx:cloverdx
- CVE-2021-42775 Path traversal in broadcom:emulex hba manager
- CVE-2021-42774 Memory corruption in broadcom:emulex hba manager
- CVE-2021-42773 Path traversal in broadcom:emulex hba manager
- CVE-2021-42772 Memory corruption in broadcom:emulex hba manager
- CVE-2021-42771 Directory Traversal in Babel
- CVE-2021-42770 Cross-site scripting in opnsense:opnsense
- CVE-2021-4277 fredsmith utils Filename screenshot_sync predictable state
- CVE-2021-42767 Neo4j Graph Database vulnerable to Path Traversal
- CVE-2021-42766 Denial of service in proof-of-stake ethereum project:proof-of-stake ethereum
- CVE-2021-42765 Denial of service in proof-of-stake ethereum project:proof-of-stake ethereum
- CVE-2021-42764 Business logic in proof-of-stake ethereum project:proof-of-stake ethereum
- CVE-2021-42763 Information disclosure in couchbase:couchbase server
- CVE-2021-42762 Security feature bypass in debian:debian linux
- CVE-2021-42761 Auth bypass in FortiWeb
- CVE-2021-42760 SQL injection in Fortinet FortiWLM
- CVE-2021-4276 SQL injection in hedgehog
- CVE-2021-42759 Command injection in Fortinet Meru AP
- CVE-2021-42758 Privilege escalation in Fortinet FortiWLC
- CVE-2021-42757 Memory corruption in FortiADC
- CVE-2021-42756 Memory corruption in FortiWeb
- CVE-2021-42755 Integer overflow in Fortinet FortiSwitch, FortiRecorder, FortiVoiceEnterprise, FortiOS, FortiProxy
- CVE-2021-42754 Code injection in Fortinet FortiClientMac
- CVE-2021-42753 Path traversal in fortinet:fortiweb
- CVE-2021-42752 Cross-site scripting in Fortinet FortiWLM
- CVE-2021-42751 Cross-site scripting in thingsboard:thingsboard
- CVE-2021-42750 Cross-site scripting in thingsboard:thingsboard
- CVE-2021-4275 katlings pyambic-pentameter cross-site request forgery
- CVE-2021-42749 Security feature bypass in fastlinemedia:beaver themer
- CVE-2021-42748 Security feature bypass in fastlinemedia:beaver builder
- CVE-2021-42744 Philips MRI 1.5T and 3T Information Exposure
- CVE-2021-42743 Local privilege escalation via a default path in Splunk Enterprise Windows