Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 86 of 273.
- CVE-2021-41987 Memory corruption in mikrotik:routeros
- CVE-2021-4198 messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)
- CVE-2021-41976 Tad Uploader - Improper Authorization
- CVE-2021-41975 Tad TadTools - Improper Authorization
- CVE-2021-41974 Tad Book3 - Improper Authorization
- CVE-2021-41973 Apache MINA HTTP listener DOS
- CVE-2021-41972 Credentials leak
- CVE-2021-41971 Possible SQL Injection when template processing is enabled
- CVE-2021-4197 Privilege escalation in kernel
- CVE-2021-41965 SQL injection in churchcrm:churchcrm
- CVE-2021-41962 Cross-site scripting in vehicle service management system project:vehicle service management system
- CVE-2021-41959 Denial of service in jerryscript:jerryscript
- CVE-2021-41952 Cross-site Scripting in Zenario CMS
- CVE-2021-41951 Cross-site scripting in montala:resourcespace
- CVE-2021-41950 Path traversal in montala:resourcespace
- CVE-2021-4195 XSS in Firmanet Software and Technology Customer Relation Manager
- CVE-2021-41948 Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
- CVE-2021-41947 SQL injection in intelliants:subrion cms
- CVE-2021-41946 Cross-site scripting in fiberhome:hg150-ub firmware
- CVE-2021-41945 Improper Input Validation in httpx
- CVE-2021-41943 Cross-site scripting in logrhythm:logrhythm
- CVE-2021-41942 SQL injection in msvod:msvod cms
- CVE-2021-4194 Improper Access Control in bookstackapp/bookstack
- CVE-2021-41938 Arbitrary file upload in ShopXO
- CVE-2021-41932 SQL injection in wolterskluwer:teammate\+ audit
- CVE-2021-41931 SQL injection in recruitment management system project:recruitment management system
- CVE-2021-41930 Cross-site scripting in online covid vaccination scheduler system project:online covid vaccination scheduler system
- CVE-2021-4193 Out-of-bounds Read in vim/vim
- CVE-2021-41929 Cross-site scripting in the electric billing management system project:the electric billing management system
- CVE-2021-41928 SQL injection in try my recipe project:try my recipe
- CVE-2021-41924 Cross-site Scripting in krayin/laravel-crm
- CVE-2021-41921 File upload in xxyopen:novel-plus
- CVE-2021-41920 SQL injection in webtareas project:webtareas
- CVE-2021-4192 Use After Free in vim/vim
- CVE-2021-41919 File upload in webtareas project:webtareas
- CVE-2021-41918 Cross-site scripting in webtareas project:webtareas
- CVE-2021-41917 Cross-site scripting in webtareas project:webtareas
- CVE-2021-41916 Cross-site request forgery in webtareas project:webtareas
- CVE-2021-4191 Information disclosure in GitLab
- CVE-2021-4190 Denial of service in Wireshark
- CVE-2021-4189 Server-side request forgery in python
- CVE-2021-4188 NULL Pointer Dereference in mruby/mruby
- CVE-2021-41878 Cross-site scripting in hkurl:i-panel administration system
- CVE-2021-41873 Auth bypass in skyworth:penguin aurora box firmware
- CVE-2021-41872 Denial of service in skyworthdigital:penguin aurora box 41502 firmware
- CVE-2021-41871 Cross-site scripting in socomec:remote view pro firmware
- CVE-2021-41870 File upload in socomec:remote view pro firmware
- CVE-2021-4187 Use After Free in vim/vim
- CVE-2021-41869 Privilege escalation in salesagility:suitecrm
- CVE-2021-41868 Remote unauthenticated attackers able to upload files in Onionshare
- CVE-2021-41867 Information disclosure vulnerability in OnionShare
- CVE-2021-41866 Cross-site scripting in mybb:mybb
- CVE-2021-41865 Denial of service in hashicorp:nomad
- CVE-2021-41864 Integer overflow in debian:debian linux
- CVE-2021-41862 Expression injection in AviatorScript
- CVE-2021-41861 Security feature bypass in telegram:telegram
- CVE-2021-4186 Null dereference in Wireshark
- CVE-2021-41850 Information disclosure in bluproducts:g90 firmware
- CVE-2021-4185 Denial of service in Wireshark
- CVE-2021-41849 Information disclosure in bluproducts:g90 firmware
- CVE-2021-41848 Hardcoded credentials in bluproducts:g90 firmware
- CVE-2021-41847 Missing authorization in 3xlogic:infinias access control
- CVE-2021-41845 SQL injection in thycotic:secret server
- CVE-2021-41844 Other in crocoblock:jetengine
- CVE-2021-41843 SQL injection in open-emr:openemr
- CVE-2021-41842 Memory corruption in insyde:insydeh2o
- CVE-2021-41841 Privilege escalation in insyde:insydeh2o
- CVE-2021-41840 Privilege escalation in insyde:insydeh2o
- CVE-2021-4184 Denial of service in Wireshark
- CVE-2021-41839 Memory corruption in insyde:insydeh2o
- CVE-2021-41838 Memory corruption in insyde:insydeh2o
- CVE-2021-41837 Memory corruption in insyde:insydeh2o
- CVE-2021-41836 Fathom Analytics <= 3.0.4 Authenticated Stored Cross-Site Scripting
- CVE-2021-41835 Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
- CVE-2021-41834 Missing authorization in Artifactory
- CVE-2021-41833 File upload in zohocorp:manageengine patch connect plus
- CVE-2021-41832 Content Manipulation with Certificate Validation Attack
- CVE-2021-41831 Timestamp Manipulation with Signature Wrapping
- CVE-2021-41830 Double Certificate Attack
- CVE-2021-4183 Memory corruption in Wireshark
- CVE-2021-41829 Weak cryptography in zohocorp:manageengine remote access plus
- CVE-2021-41828 Hardcoded credentials in zohocorp:manageengine remote access plus
- CVE-2021-41827 Hardcoded credentials in zohocorp:manageengine remote access plus
- CVE-2021-41826 Open redirect in place:placeos authentication
- CVE-2021-41825 Cross-site scripting in verint:workforce optimization
- CVE-2021-41824 CSV Injection Vulnerability
- CVE-2021-41823 Cross-site scripting in kemptechnologies:web application firewall
- CVE-2021-41821 Integer overflow in wazuh:wazuh
- CVE-2021-4182 Denial of service in Wireshark
- CVE-2021-41819 Cookie Prefix Spoofing in CGI::Cookie.parse
- CVE-2021-41817 Regular expression denial of service vulnerability (ReDoS) in date
- CVE-2021-41816 Buffer overrun in CGI.escape_html
- CVE-2021-41810 Script injection in M-Files Admin
- CVE-2021-4181 Memory corruption in Wireshark
- CVE-2021-41809 SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.
- CVE-2021-41808 Information disclosure in M-Files Server
- CVE-2021-41807 Auth bypass in M-Files Server
- CVE-2021-41805 Privilege escalation in hashicorp:consul
- CVE-2021-41803 HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions
- CVE-2021-41802 Hashicorp Vault Privilege Escalation Vulnerability