Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 98 of 273.
- CVE-2021-4039 Command injection in NWA1100-NH firmware
- CVE-2021-40389 Privilege escalation in advantech:deviceon\/iedge
- CVE-2021-40388 Privilege escalation in advantech:sq manager
- CVE-2021-40387 Other in kaseya:unitrends backup software
- CVE-2021-40386 Other in kaseya:unitrends backup
- CVE-2021-40385 Privilege escalation in kaseya:unitrends backup software
- CVE-2021-40382 Missing authorization in comprotech:ip570 firmware
- CVE-2021-40381 Missing authorization in comprotech:ip570 firmware
- CVE-2021-40380 Information disclosure in comprotech:ip570 firmware
- CVE-2021-4038 NSM vulnerable to XSS
- CVE-2021-40379 Missing authorization in comprotech:ip570 firmware
- CVE-2021-40378 Missing authorization in comprotech:ip570 firmware
- CVE-2021-40377 Cross-site scripting in smartertools:smartermail
- CVE-2021-40376 Auth bypass in otris:update manager
- CVE-2021-40375 Information disclosure in apperta:openeyes
- CVE-2021-40374 Cross-site scripting in apperta:openeye
- CVE-2021-40373 Code injection in playsms:playsms
- CVE-2021-40371 Path traversal in gridprosoftware:request management
- CVE-2021-4037 Kernel: security regression for cve-2018-13405
- CVE-2021-40369 XSS vulnerability on Denounce plugin
- CVE-2021-40368 Memory corruption in SIMATIC S7-400 CPU 412-1 DP V7
- CVE-2021-40367 Memory corruption in syngo fastView
- CVE-2021-40366 Weak cryptography in Climatix POL909 (AWB module)
- CVE-2021-40365 Denial of service in SIMATIC Drive Controller CPU 1504D TF
- CVE-2021-40364 Information disclosure in SIMATIC PCS 7 V8.2
- CVE-2021-40363 Weak cryptography in SIMATIC PCS 7 V8.2
- CVE-2021-40360 Information disclosure in SIMATIC PCS 7 V8.2
- CVE-2021-40359 Path traversal in OpenPCS 7 V8.2
- CVE-2021-40358 Path traversal in SIMATIC PCS 7 V8.2
- CVE-2021-40357 Path traversal in Teamcenter Active Workspace V4.3
- CVE-2021-40356 XML external entity in Teamcenter V12.4
- CVE-2021-40355 Missing authorization in Teamcenter V12.4
- CVE-2021-40354 Missing authorization in Teamcenter V12.4
- CVE-2021-40353 SQL injection in os4ed:opensis
- CVE-2021-40352 Missing authorization in open-emr:openemr
- CVE-2021-40350 Auth bypass in christiedigital:dwu850-gs firmware
- CVE-2021-4035 Wocu Monitoring stored Cross-Site Scripting (XSS)
- CVE-2021-40349 Path traversal in speed test project:speed test
- CVE-2021-40348 Code injection in spacewalk project:spacewalk
- CVE-2021-40347 GNU Mailman Postorius Access Control Issues
- CVE-2021-40346 Integer overflow in debian:debian linux
- CVE-2021-40345 Command injection in nagios:nagios xi
- CVE-2021-40344 File upload in nagios:nagios xi
- CVE-2021-40343 Privilege escalation in nagios:nagios xi
- CVE-2021-40342 Use of default key for encryption
- CVE-2021-40341 Weak DES encryption
- CVE-2021-40340 OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
- CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write
- CVE-2021-40339 OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
- CVE-2021-40338 OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
- CVE-2021-40337 OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
- CVE-2021-40336 HTTP Response Splitting in Hitachi Energy’s MSM Product
- CVE-2021-40335 Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product
- CVE-2021-40334 SSH activation problem in the proprietary management protocol (port TCP 5558)
- CVE-2021-40333 Weak default credential associated with TCP port 26
- CVE-2021-40331 Permissions problem in the Apache Ranger Hive Plugin
- CVE-2021-40330 Other in debian:debian linux
- CVE-2021-4033 Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
- CVE-2021-40329 Auth bypass in PingFederate
- CVE-2021-40327 Missing authorization in trustedfirmware:trusted firmware-m
- CVE-2021-40326 Security feature bypass in foxit:pdf editor
- CVE-2021-40325 Cobbler before 3.3.0 allows authorization bypass for modification of settings.
- CVE-2021-40324 Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
- CVE-2021-40323 Cobbler before 3.3.0 allows log poisoning
- CVE-2021-4032 Denial of service in kernel
- CVE-2021-40317 SQL injection in piwigo:piwigo
- CVE-2021-40313 SQL injection in piwigo:piwigo
- CVE-2021-40310 Cross-site scripting in os4ed:opensis
- CVE-2021-4031 Syltek Insufficient Verification of Data Authenticity
- CVE-2021-40309 SQL injection in os4ed:opensis
- CVE-2021-40303 Cross-site scripting in perfexcrm:perfex crm
- CVE-2021-4030 Cross-site request forgery in ARMOR Z1 (NBG6816) firmware
- CVE-2021-40292 Cross-site scripting in dzzoffice:dzzoffice
- CVE-2021-4029 Command injection in ARMOR Z1 (NBG6816) firmware
- CVE-2021-40289 mm-wiki is vulnerable to Cross-Site Scripting (XSS)
- CVE-2021-40288 Denial of service in tp-link:archer ax10 firmware
- CVE-2021-40285 Path traversal in htmly:htmly
- CVE-2021-40284 Memory corruption in dlink:dsl-3782 firmware
- CVE-2021-40282 SQL injection in zzcms:zzcms
- CVE-2021-40281 SQL injection in zzcms:zzcms
- CVE-2021-40280 SQL injection in zzcms:zzcms
- CVE-2021-4028 Use after free in kernel
- CVE-2021-40279 SQL injection in zzcms:zzcms
- CVE-2021-40272 Cross-site scripting in op5:monitor
- CVE-2021-40266 Null dereference in freeimage project:freeimage
- CVE-2021-40265 Memory corruption in freeimage project:freeimage
- CVE-2021-40264 Null dereference in freeimage project:freeimage
- CVE-2021-40263 Memory corruption in freeimage project:freeimage
- CVE-2021-40262 Denial of service in freeimage project:freeimage
- CVE-2021-40261 Cross-site scripting in casap automated enrollment system project:casap automated enrollment system
- CVE-2021-40260 Cross-site scripting in tailor management system project:tailor management system
- CVE-2021-4026 Improper Access Control in bookstackapp/bookstack
- CVE-2021-40247 SQL injection in oretnom23:budget and expense tracker system
- CVE-2021-40241 Memory corruption in xfig project:xfig
- CVE-2021-4024 Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman
- CVE-2021-40239 Memory corruption in miniftpd project:miniftpd
- CVE-2021-40238 Cross-site scripting in webuzo:webuzo
- CVE-2021-4023 Denial of service in kernel
- CVE-2021-40226 Memory corruption in glyphandcog:xpdfreader
- CVE-2021-40223 Cross-site scripting in rittal:cmc pu iii 7030.000 firmware