Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 90 of 273.
- CVE-2021-41347 Windows AppX Deployment Service Elevation of Privilege Vulnerability
- CVE-2021-41346 Console Window Host Security Feature Bypass Vulnerability
- CVE-2021-41345 Storage Spaces Controller Elevation of Privilege Vulnerability
- CVE-2021-41344 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2021-41343 Windows Fast FAT File System Driver Information Disclosure Vulnerability
- CVE-2021-41342 Windows MSHTML Platform Remote Code Execution Vulnerability
- CVE-2021-41340 Windows Graphics Component Remote Code Execution Vulnerability
- CVE-2021-4134 Fancy Product Designer <= 4.7.4 Admin+ SQL Injection
- CVE-2021-41339 Microsoft DWM Core Library Elevation of Privilege Vulnerability
- CVE-2021-41338 Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
- CVE-2021-41337 Active Directory Security Feature Bypass Vulnerability
- CVE-2021-41336 Windows Kernel Information Disclosure Vulnerability
- CVE-2021-41335 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2021-41334 Windows Desktop Bridge Elevation of Privilege Vulnerability
- CVE-2021-41333 Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2021-41332 Windows Print Spooler Information Disclosure Vulnerability
- CVE-2021-41331 Windows Media Audio Decoder Remote Code Execution Vulnerability
- CVE-2021-41330 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2021-4133 Improper Authorization in Keycloak
- CVE-2021-41329 Information disclosure in datalust:seq
- CVE-2021-41326 Command injection in misp-project:misp
- CVE-2021-41325 Missing authorization in pydio:cells
- CVE-2021-41324 Path traversal in pydio:cells
- CVE-2021-41323 Path traversal in pydio:cells
- CVE-2021-41322 Business logic in polycom:vvx 400 firmware
- CVE-2021-41320 Hardcoded credentials in iongroup:wallstreet suite
- CVE-2021-4132 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
- CVE-2021-41318 Cross-site scripting in progress:whatsup gold
- CVE-2021-41317 Auth bypass in xss hunter express project:xss hunter express
- CVE-2021-41316 Command injection in device42:device42
- CVE-2021-41315 Command injection in device42:remote collector
- CVE-2021-41314 Auth bypass in netgear:gc108p firmware
- CVE-2021-41313 Missing authorization in Jira Data Center
- CVE-2021-41312 Auth bypass in Jira Data Center
- CVE-2021-41311 Auth bypass in Jira Data Center
- CVE-2021-41310 Cross-site scripting in Jira Data Center
- CVE-2021-4131 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
- CVE-2021-41309 Auth bypass in Jira Data Center
- CVE-2021-41308 Missing authorization in Jira Data Center
- CVE-2021-41307 Missing authorization in Jira Data Center
- CVE-2021-41306 Missing authorization in Jira Data Center
- CVE-2021-41305 Missing authorization in Jira Data Center
- CVE-2021-41304 Cross-site scripting in Jira Data Center
- CVE-2021-41303 Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass
- CVE-2021-41302 ECOA BAS controller - Missing Encryption of Sensitive Data
- CVE-2021-41301 ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2021-41300 ECOA BAS controller - Insufficiently Protected Credentials-2
- CVE-2021-4130 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
- CVE-2021-41299 ECOA BAS controller - Use of Hard-coded Credentials
- CVE-2021-41298 ECOA BAS controller - Improper Access Control
- CVE-2021-41297 ECOA BAS controller - Insufficiently Protected Credentials-1
- CVE-2021-41296 ECOA BAS controller - Weak Password Requirements
- CVE-2021-41295 ECOA BAS controller - Cross-Site Request Forgery (CSRF)
- CVE-2021-41294 ECOA BAS controller - Path Traversal-4
- CVE-2021-41293 ECOA BAS controller - Path Traversal-3
- CVE-2021-41292 ECOA BAS controller - Broken Authentication
- CVE-2021-41291 ECOA BAS controller - Path Traversal-1
- CVE-2021-41290 ECOA BAS controller - Path Traversal-1
- CVE-2021-4129 Memory corruption in Firefox
- CVE-2021-41289 ASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer
- CVE-2021-41288 SQL injection in zohocorp:manageengine opmanager
- CVE-2021-41286 Auth bypass in omikron:multicash
- CVE-2021-41285 Privilege escalation in micron:ballistix memory overview display utility
- CVE-2021-41282 Code injection in pfsense:pfsense
- CVE-2021-41281 Path traversal in Matrix Synapse
- CVE-2021-41280 OS command injection in Sharetribe Go
- CVE-2021-4128 Use after free in Firefox
- CVE-2021-41279 Zip Slip Vulnerability in BaserCMS
- CVE-2021-41278 Broken encryption in EdgeX Foundry
- CVE-2021-41277 Metabase GeoJSON API Local File Inclusion
- CVE-2021-41276 Indirect LDAP injection in Tuleap
- CVE-2021-41275 Authentication Bypass by CSRF Weakness
- CVE-2021-41274 Authentication Bypass by CSRF Weakness
- CVE-2021-41273 Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
- CVE-2021-41272 SHL, SHR, and SAR operations trigger native exception at key values in besu
- CVE-2021-41271 Cache poisoning via maliciously-formed request in discourse
- CVE-2021-41270 CSV Injection in Symfony
- CVE-2021-4127 Memory corruption in Firefox ESR
- CVE-2021-41269 Unauthenticated remote code injection in cron-utils
- CVE-2021-41268 Cookie persistence in Symfony
- CVE-2021-41267 Webcache Poisoning in Symfony
- CVE-2021-41266 Authentication bypass issue in the Operator Console
- CVE-2021-41265 Improper Authentication in Flask-AppBuilder
- CVE-2021-41264 UUPSUpgradeable vulnerability in OpenZeppelin Contracts
- CVE-2021-41263 Secure/signed cookies share secrets between sites in rails_multisite
- CVE-2021-41262 SQL Injection in Galette
- CVE-2021-41261 Stored Cross-site Scripting in Galette
- CVE-2021-41260 Missing CSRF checks in Galette
- CVE-2021-4126 Security feature bypass in Thunderbird
- CVE-2021-41258 Cross-site scripting (XSS) from image block content in the site frontend
- CVE-2021-41256 Intent URI permissions manipulation in nextcloud news-android
- CVE-2021-41254 Privilege escalation to cluster admin on multi-tenant environments
- CVE-2021-41253 Possible heap buffer overflow when using zycore string functions in formatter hooks
- CVE-2021-41252 Cross-site scripting (XSS) from writer field content in the site frontend
- CVE-2021-41251 Possibility to elevate privileges or get unauthorized access to data
- CVE-2021-41250 Presence of non-blacklisted URL bypasses all other filters
- CVE-2021-4125 Deserialization in kube-reporting/hive
- CVE-2021-41249 XSS vulnerability in GraphQL Playground
- CVE-2021-41248 XSS vulnerability in GraphiQL
- CVE-2021-41247 incomplete logout in JupyterHub