2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39081 | HIGH | 7.5 | 0.3% | Dec 19, 2024 | IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an at... |
| CVE-2021-26280 | HIGH | 7.9 | 0.1% | Dec 17, 2024 | Locally installed application can bypass the permission check and perform system operations that require permission. |
| CVE-2021-38118 | HIGH | 7.8 | 0.2% | Nov 22, 2024 | Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000. |
| CVE-2021-38116 | HIGH | 8.8 | 0.6% | Nov 22, 2024 | Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all v... |
| CVE-2021-1285 | HIGH | 7.4 | 2.7% | Nov 18, 2024 | Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine... |
| CVE-2021-1132 | HIGH | 7.5 | 1.6% | Nov 18, 2024 | A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator (NS... |
| CVE-2021-3742 | HIGH | 8.8 | 0.4% | Nov 15, 2024 | A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to ... |
| CVE-2021-27702 | HIGH | 7.3 | 0.3% | Nov 12, 2024 | Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the route... |
| CVE-2021-27700 | HIGH | 7.6 | 0.3% | Nov 12, 2024 | SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized customer with partner m... |
| CVE-2021-41737 | HIGH | 7.5 | 0.5% | Nov 10, 2024 | In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = r... |
| CVE-2021-4451 | HIGH | 7.2 | 0.6% | Oct 16, 2024 | The NinjaFirewall plugin for WordPress is vulnerable to Authenticated PHAR Deserialization in versions up to, and includ... |
| CVE-2021-4450 | HIGH | 8.8 | 0.5% | Oct 16, 2024 | The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, and includi... |
| CVE-2021-4447 | HIGH | 8.8 | 0.4% | Oct 16, 2024 | The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to and inc... |
| CVE-2021-4444 | HIGH | 7.3 | 0.3% | Oct 16, 2024 | The Product Filter by WooBeWoo plugin for WordPress is vulnerable to authorization bypass in versions up to, and includi... |
| CVE-2021-38963 | HIGH | 8 | 0.6% | Sep 25, 2024 | IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the syst... |
| CVE-2021-38023 | HIGH | 8.8 | 0.3% | Sep 23, 2024 | Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit he... |
| CVE-2021-27916 | HIGH | 8.1 | 0.8% | Sep 17, 2024 | Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletio... |
| CVE-2021-22532 | HIGH | 7.5 | 0.4% | Sep 12, 2024 | Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before... |
| CVE-2021-38122 | HIGH | 8.2 | 0.3% | Aug 28, 2024 | A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and d... |
| CVE-2021-38121 | HIGH | 8.8 | 0.2% | Aug 28, 2024 | Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific... |
| CVE-2021-38120 | HIGH | 7.2 | 0.5% | Aug 28, 2024 | A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled fun... |
| CVE-2021-26344 | HIGH | 8.2 | 0.2% | Aug 13, 2024 | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with acces... |
| CVE-2021-47624 | HIGH | 7.1 | 0.2% | Jul 16, 2024 | In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix reference count leaks in rpc_sysfs_... |
| CVE-2021-4440 | HIGH | 8.8 | 0.2% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit... |
| CVE-2021-47621 | HIGH | 7.5 | 0.6% | Jun 21, 2024 | ClassGraph before 4.8.112 was not resistant to XML eXternal Entity (XXE) attacks. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now