Vulnerabilities (CVE)

Total 421268 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42218 1 Rice 1 Open Motion Planning Library 2026-06-17 5.0 MEDIUM 7.5 HIGH
OMPL v1.5.2 contains a memory leak in VFRRT.cpp
CVE-2021-42205 1 Lenovo 1 Elan Miniport Touchpad Driver 2026-06-17 N/A 4.7 MEDIUM
ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice.
CVE-2021-42204 1 Swftools 1 Swftools 2026-06-17 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause code execution.
CVE-2021-42203 1 Swftools 1 Swftools 2026-06-17 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.
CVE-2021-42202 1 Swftools 1 Swftools 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an attacker to cause Denial of Service.
CVE-2021-42201 1 Swftools 1 Swftools 2026-06-17 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located in rfxswf.c. It allows an attacker to cause code execution.
CVE-2021-42200 1 Swftools 1 Swftools 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located in swfdump.c. It allows an attacker to cause Denial of Service.
CVE-2021-42199 1 Swftools 1 Swftools 2026-06-17 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.
CVE-2021-42198 1 Swftools 1 Swftools 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause Denial of Service.
CVE-2021-42197 1 Swftools 1 Swftools 2026-06-17 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allows an attacker to cause code execution.
CVE-2021-42196 1 Swftools 1 Swftools 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() located in abc.c. It allows an attacker to cause Denial of Service.
CVE-2021-42195 1 Swftools 1 Swftools 2026-06-17 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() located in swfdump.c. It allows an attacker to cause code Execution.
CVE-2021-42194 1 Eyoucms 1 Eyoucms 2026-06-17 6.5 MEDIUM 7.2 HIGH
The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml_ load_ String function, which itself does not prohibit external entities, triggering a XML external entity (XXE) injection vulnerability.
CVE-2021-42192 1 Konga Project 1 Konga 2026-06-17 9.0 HIGH 8.8 HIGH
Konga v0.14.9 is affected by an incorrect access control vulnerability where a specially crafted request can lead to privilege escalation.
CVE-2021-42185 1 Wdja 1 Wdja 2026-06-17 7.5 HIGH 9.8 CRITICAL
wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function.
CVE-2021-42183 1 Masacms 1 Masacms 2026-06-17 5.0 MEDIUM 7.5 HIGH
MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/.
CVE-2021-42171 1 Tribalsystems 1 Zenario 2026-06-17 6.5 MEDIUM 7.2 HIGH
Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse system files, browse local resources, attack other servers, and exploit the local vulnerabilities, and so forth.
CVE-2021-42169 1 Simple Payroll System With Dynamic Tax Bracket Project 1 Simple Payroll System With Dynamic Tax Bracket 2026-06-17 7.5 HIGH 9.8 CRITICAL
The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code (by: oretnom23 ) is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter (username) from the login form is not protected correctly and there is no security and escaping from malicious payloads.
CVE-2021-42168 1 Try My Recipe Project 1 Try My Recipe 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting (XSS) in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the login_registration page.
CVE-2021-42165 1 Mitrastar 2 Gpt-2541gnac-n1, Gpt-2541gnac-n1 Firmware 2026-06-17 9.0 HIGH 8.8 HIGH
MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path".