Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 88 of 273.
- CVE-2021-41641 Link Following in Deno
- CVE-2021-4164 Cross-Site Request Forgery (CSRF) in janeczku/calibre-web
- CVE-2021-41639 Information disclosure in melag:ftp server
- CVE-2021-41638 Auth bypass in melag:ftp server
- CVE-2021-41637 Misconfiguration in melag:ftp server
- CVE-2021-41636 Path traversal in melag:ftp server
- CVE-2021-41635 Misconfiguration in melag:ftp server
- CVE-2021-41634 Information disclosure in melag:ftp server
- CVE-2021-4162 Cross-Site Request Forgery (CSRF) in archivy/archivy
- CVE-2021-41619 Code injection in gradle:enterprise
- CVE-2021-41617 Privilege escalation in fedoraproject:fedora
- CVE-2021-41616 Apache ddlutils 1.0 readobject vulnerability
- CVE-2021-41615 Weak cryptography in embedthis:goahead
- CVE-2021-41614 Privilege escalation in openrisc:mor1kx firmware
- CVE-2021-41613 Other in openrisc:mor1kx firmware
- CVE-2021-41612 Other in openrisc:mor1kx firmware
- CVE-2021-41611 Security feature bypass in fedoraproject:fedora
- CVE-2021-4161 ICSA-21-357-01 Moxa MGate Protocol Gateways
- CVE-2021-41609 SQL injection in classapps:selectsurvey.net
- CVE-2021-41608 Missing authorization in classapps:selectsurvey.net
- CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS
- CVE-2021-41599 Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution
- CVE-2021-41598 UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user
- CVE-2021-41597 Cross-site request forgery in salesagility:suitecrm
- CVE-2021-41596 Path traversal in salesagility:suitecrm
- CVE-2021-41595 Path traversal in salesagility:suitecrm
- CVE-2021-41594 Missing authorization in rsa:archer
- CVE-2021-41593 Business logic in lightning network daemon project:lightning network daemon
- CVE-2021-41592 Business logic in elementsproject:c-lightning
- CVE-2021-41591 Business logic in acinq:eclair
- CVE-2021-41590 Server-side request forgery in gradle:enterprise
- CVE-2021-4159 Information disclosure in kernel
- CVE-2021-41589 Misconfiguration in gradle:build cache node
- CVE-2021-41588 Deserialization in gradle:gradle
- CVE-2021-41587 Server-side request forgery in gradle:gradle
- CVE-2021-41586 Server-side request forgery in gradle:gradle
- CVE-2021-41585 ATS stops accepting connections on FreeBSD
- CVE-2021-41584 Information disclosure in gradle:gradle
- CVE-2021-41583 Command injection in eduvpn:vpn-user-portal
- CVE-2021-41581 Memory corruption in openbsd:libressl
- CVE-2021-41580 Improper Access Control in passport-oauth2
- CVE-2021-4158 Null dereference in QEMU
- CVE-2021-41579 Path traversal in laquisscada:scada
- CVE-2021-41578 Path traversal in myscada:mydesigner
- CVE-2021-41573 Information disclosure in hitachi:content platform anywhere
- CVE-2021-41571 Pulsar Admin API allows access to data from other tenants using getMessageById API
- CVE-2021-41570 Cross-site scripting in veritas:netbackup
- CVE-2021-4157 Memory corruption in kernel
- CVE-2021-41569 Code injection in sas:sas\/intrnet
- CVE-2021-41568 Tad Web - Improper Authorization
- CVE-2021-41567 Tad Uploader - Stored XSS
- CVE-2021-41566 Tad TadTools - Arbitrary File Upload
- CVE-2021-41565 Tad TadTools - Reflected XSS
- CVE-2021-41564 Tad Honor - Improper Authorization
- CVE-2021-41563 Tad Book3 - Stored XSS
- CVE-2021-41562 Deletion of arbitrary files vulnerability in Snow Agent for Windows
- CVE-2021-41561 Apache Parquet-MR potential DoS in case of malicious Parquet file
- CVE-2021-41560 File upload in opencats:opencats
- CVE-2021-4156 Memory corruption in libsndfile
- CVE-2021-41559 Quadratic blowup in Convert::xml2array()
- CVE-2021-41558 Security feature bypass in set user project:set user
- CVE-2021-41557 Cross-site scripting in sofico:miles rich internet application
- CVE-2021-41556 Memory corruption in fedoraproject:fedora
- CVE-2021-41555 Cross-site scripting in archibus:web central
- CVE-2021-41554 Missing authorization in archibus:web central
- CVE-2021-41553 Auth bypass in archibus:web central
- CVE-2021-41552 Command injection in commscope:arris surfboard sbg10 firmware
- CVE-2021-41551 Path traversal in leostream:connection broker
- CVE-2021-41550 File upload in leostream:connection broker
- CVE-2021-4155 Information disclosure in kernel
- CVE-2021-41547 Path traversal in Teamcenter Active Workspace V4.3
- CVE-2021-41546 Denial of service in RUGGEDCOM ROX MX5000
- CVE-2021-41545 Denial of service in Desigo DXR2
- CVE-2021-41544 Privilege escalation in Siemens Software Center
- CVE-2021-41543 Information disclosure in Climatix POL909 (AWB module)
- CVE-2021-41542 Cross-site scripting in Climatix POL909 (AWB module)
- CVE-2021-41541 Cross-site scripting in Climatix POL909 (AWB module)
- CVE-2021-41540 Use after free in Solid Edge SE2021
- CVE-2021-4154 Use after free in kernel
- CVE-2021-41539 Use after free in Solid Edge SE2021
- CVE-2021-41538 Information disclosure in NX 1953 Series
- CVE-2021-41537 Use after free in Solid Edge SE2021
- CVE-2021-41536 Use after free in Solid Edge SE2021
- CVE-2021-41535 Use after free in NX 1953 Series
- CVE-2021-41534 Memory corruption in NX 1980 Series
- CVE-2021-41533 Memory corruption in NX 1980 Series
- CVE-2021-41532 Unauthenticated access to Ozone Recon HTTP endpoints
- CVE-2021-41531 Invalid RPKI data could disable Route Origin Validation on RTR clients.
- CVE-2021-41530 Denial of service in Forcepoint Next Generation Firewall
- CVE-2021-41528 Improper authorization related to Import / Export interfaces on RISC Platform
- CVE-2021-41527 2FA bypass on the RISC Platform
- CVE-2021-41526 Privilege escalation in flexera:revenera installshield
- CVE-2021-41525 Other in flexera:flexnet inventory agent and beacon
- CVE-2021-41524 null pointer dereference in h2 fuzzing
- CVE-2021-41511 SQL injection in lodging reservation management system project:lodging reservation management system
- CVE-2021-41506 Hardcoded credentials in xiongmaitech:ahb7008t-mh-v2 firmware
- CVE-2021-41504 Auth bypass in dlink:dcs-5000l firmware
- CVE-2021-41503 Auth bypass in d-link:dcs-5000l firmware
- CVE-2021-41502 Cross site scripting in intelliants/subrion
- CVE-2021-41500 Incorrect Comparison in cvxopt