Vulnerabilities (CVE)

Total 421460 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45733 1 Totolink 2 X5000r, X5000r Firmware 2026-06-17 10.0 HIGH 9.8 CRITICAL
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time.
CVE-2021-45732 1 Netgear 2 R6700, R6700 Firmware 2026-06-17 6.5 MEDIUM 8.8 HIGH
Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools, a user can reconfigure settings not intended to be manipulated, repackage the configuration, and restore a backup causing these settings to be changed.
CVE-2021-45730 1 Jfrog 1 Artifactory 2026-06-17 4.0 MEDIUM 6.0 MEDIUM
JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete Repository Layouts while Repository Layouts configuration should only be available for Platform Administrators.
CVE-2021-45729 1 Srmilon 1 Wp Google Map 2026-06-17 5.5 MEDIUM 5.4 MEDIUM
The Privilege Escalation vulnerability discovered in the WP Google Map WordPress plugin (versions <= 1.8.0) allows authenticated low-role users to create, edit, and delete maps.
CVE-2021-45721 1 Jfrog 1 Artifactory 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one of the XHR parameters in Users REST API endpoint. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.36.1 versions prior to 7.29.8; JFrog Artifactory versions before 6.23.41 versions prior to 6.23.38.
CVE-2021-45720 1 Lru Project 1 Lru 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation.
CVE-2021-45719 1 Rusqlite Project 1 Rusqlite 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. update_hook has a use-after-free.
CVE-2021-45718 1 Rusqlite Project 1 Rusqlite 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollback_hook has a use-after-free.
CVE-2021-45717 1 Rusqlite Project 1 Rusqlite 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commit_hook has a use-after-free.
CVE-2021-45716 1 Rusqlite Project 1 Rusqlite 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_collation has a use-after-free.
CVE-2021-45715 1 Rusqlite Project 1 Rusqlite 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_window_function has a use-after-free.
CVE-2021-45714 1 Rusqlite Project 1 Rusqlite 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_aggregate_function has a use-after-free.
CVE-2021-45713 1 Rusqlite Project 1 Rusqlite 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_scalar_function has a use-after-free.
CVE-2021-45712 1 Rust-embed Project 1 Rust-embed 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rust-embed crate before 6.3.0 for Rust. A ../ directory traversal can sometimes occur in debug mode.
CVE-2021-45711 1 Simple Asn1 Project 1 Simple Asn1 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the simple_asn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f.
CVE-2021-45710 1 Tokio 1 Tokio 2026-06-17 5.1 MEDIUM 8.1 HIGH
An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.
CVE-2021-45709 1 Crypto2 Project 1 Crypto2 2026-06-17 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may occur.
CVE-2021-45708 1 Abomonation Project 1 Abomonation 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass.
CVE-2021-45707 1 Nix Project 1 Nix 2026-06-17 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups.
CVE-2021-45706 1 Zeroize Derive Project 1 Zeroize Derive 2026-06-17 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the zeroize_derive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum.