Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 85 of 273.
- CVE-2021-42098 Privilege escalation in Remote Desktop Manager
- CVE-2021-42097 Cross-site request forgery in debian:debian linux
- CVE-2021-42096 Weak cryptography in debian:debian linux
- CVE-2021-42095 Denial of service in netsarang:xshell
- CVE-2021-42094 Command injection in zammad:zammad
- CVE-2021-42093 Code injection in zammad:zammad
- CVE-2021-42092 Cross-site scripting in zammad:zammad
- CVE-2021-42091 Server-side request forgery in zammad:zammad
- CVE-2021-42090 Deserialization in zammad:zammad
- CVE-2021-4209 Null dereference in GnuTLS
- CVE-2021-42089 Information disclosure in zammad:zammad
- CVE-2021-42088 Cross-site scripting in zammad:zammad
- CVE-2021-42087 Information disclosure in zammad:zammad
- CVE-2021-42086 Privilege escalation in zammad:zammad
- CVE-2021-42085 Cross-site scripting in zammad:zammad
- CVE-2021-42084 Denial of service in zammad:zammad
- CVE-2021-42083 Authenticated Stored XSS in OSNEXUS QuantaStor 6.0.0.335
- CVE-2021-42082 Local Privilege Escalation to root in OSNEXUS QuantaStor before 6.0.0.355
- CVE-2021-42081 Authenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.355
- CVE-2021-42080 Reflected XSS vulnerability in OSNEXUS QuantaStor before 6.0.0.355
- CVE-2021-4208 ExportFeed <= 2.0.1.0 - Admin+ SQL Injection
- CVE-2021-42079 SSRF vulnerability in OSNEXUS QuantaStor before 6.0.0.355
- CVE-2021-42078 Cross-site scripting in php event calendar project:php event calendar
- CVE-2021-42077 SQL injection in kaysongroup:php event calendar
- CVE-2021-42076 Denial of service in barrier project:barrier
- CVE-2021-42075 Denial of service in barrier project:barrier
- CVE-2021-42074 Use after free in barrier project:barrier
- CVE-2021-42073 Auth bypass in barrier project:barrier
- CVE-2021-42072 Auth bypass in barrier project:barrier
- CVE-2021-42071 Command injection in visual-tools:dvr vx16 firmware
- CVE-2021-42070 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2021-4207 Race condition in QEMU
- CVE-2021-42069 Memory corruption in SAP 3D Visual Enterprise Viewer
- CVE-2021-42068 Denial of service in SAP 3D Visual Enterprise Viewer
- CVE-2021-42067 Missing authorization in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2021-42066 Information disclosure in SAP Business One
- CVE-2021-42064 SQL injection in SAP Commerce
- CVE-2021-42063 Cross-site scripting in SAP Knowledge Warehouse
- CVE-2021-42062 Missing authorization in SAP ERP HCM Portugal
- CVE-2021-42061 Cross-site scripting in SAP BusinessObjects Business Intelligence Platform
- CVE-2021-42060 Privilege escalation in insyde:insydeh2o
- CVE-2021-4206 Integer overflow in QEMU
- CVE-2021-42059 Memory corruption in insyde:insydeh2o
- CVE-2021-42057 Obsidian Dataview vulnerable to code injection due to unsafe eval
- CVE-2021-42056 Race condition in thalesgroup:safenet authentication client
- CVE-2021-42055 Misconfiguration in asus:ux582lr firmware
- CVE-2021-42054 Memory corruption in accel-ppp:accel-ppp
- CVE-2021-42053 Cross-site scripting in Unicorn framework
- CVE-2021-42052 Path traversal in ipesa:e-flow
- CVE-2021-42051 Cross-site scripting in abantecart:abantecart
- CVE-2021-42050 Cross-site scripting in abantecart:abantecart
- CVE-2021-42049 Business logic in mediawiki:mediawiki
- CVE-2021-42048 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-42047 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-42046 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-42045 Business logic in mediawiki:mediawiki
- CVE-2021-42044 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-42043 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-42042 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-42041 Cross-site scripting in mediawiki:mediawiki
- CVE-2021-42040 Denial of service in mediawiki:mediawiki
- CVE-2021-4204 Memory corruption in kernel
- CVE-2021-4203 Use after free in kernel
- CVE-2021-42029 Privilege escalation in SIMATIC STEP 7 (TIA Portal) V15
- CVE-2021-42028 Memory corruption in syngo fastView
- CVE-2021-42027 Security feature bypass in SINUMERIK Edge
- CVE-2021-42026 Missing authorization in Mendix Applications using Mendix 8
- CVE-2021-42025 Missing authorization in Mendix Applications using Mendix 8
- CVE-2021-42024 Memory corruption in Simcenter STAR-CCM+ Viewer
- CVE-2021-42023 Weak cryptography in ModelSim Simulation
- CVE-2021-42022 Path traversal in SIMATIC eaSie PCS 7 Skill Package
- CVE-2021-42021 Path traversal in Siveillance Video DLNA Server
- CVE-2021-42020 Other in RUGGEDCOM M2100
- CVE-2021-4202 Use after free in kernel
- CVE-2021-42019 Integer overflow in RUGGEDCOM M2100
- CVE-2021-42018 Memory corruption in RUGGEDCOM M2100
- CVE-2021-42017 Weak cryptography in RUGGEDCOM M2100
- CVE-2021-42016 Information disclosure in RUGGEDCOM M2100
- CVE-2021-42015 Information disclosure in Mendix Applications using Mendix 7
- CVE-2021-42013 Apache HTTP Server Path Traversal
- CVE-2021-42012 Memory corruption in Trend Micro Apex One
- CVE-2021-42011 Privilege escalation in Trend Micro Apex One
- CVE-2021-42010 CRLF log injection
- CVE-2021-4201 Pre-authentication session hijacking
- CVE-2021-42009 Apache Traffic Control Traffic Ops Email Injection Vulnerability
- CVE-2021-42008 Memory corruption in debian:debian linux
- CVE-2021-42006 Memory corruption in gclib project:gclib
- CVE-2021-42002 File upload in zohocorp:manageengine admanager plus
- CVE-2021-42001 PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure
- CVE-2021-42000 Business logic in PingFederate
- CVE-2021-4200 Write access to the Catalog for any user when restricted-admin role is enabled
- CVE-2021-41995 PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks
- CVE-2021-41994 PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks
- CVE-2021-41993 PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks
- CVE-2021-41992 PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass
- CVE-2021-41991 Integer overflow in debian:debian linux
- CVE-2021-41990 Integer overflow in debian:debian linux
- CVE-2021-4199 Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)
- CVE-2021-41989 Misconfiguration in qlik:qlikview
- CVE-2021-41988 Misconfiguration in qlik:nprinting designer