2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46853 | MEDIUM | 5.9 | 0.8% | Nov 3, 2022 | Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent be... |
| CVE-2021-45448 | MEDIUM | 6.5 | 0.6% | Nov 2, 2022 | Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 using the Pentaho Analyzer plugin exposes a ser... |
| CVE-2021-45447 | HIGH | 7.5 | 0.3% | Nov 2, 2022 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 with the Data Lineage ... |
| CVE-2021-45446 | HIGH | 7.5 | 0.4% | Nov 2, 2022 | A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not ca... |
| CVE-2021-37789 | HIGH | 8.1 | 0.8% | Nov 2, 2022 | stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service... |
| CVE-2021-27784 | HIGH | 7.5 | 0.2% | Oct 31, 2022 | The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix pr... |
| CVE-2021-40241 | CRITICAL | 9.8 | 1.0% | Oct 31, 2022 | xfig 3.2.7 is vulnerable to Buffer Overflow. |
| CVE-2021-40661 | HIGH | 7.5 | 4.6% | Oct 31, 2022 | A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Adva... |
| CVE-2021-42777 | CRITICAL | 9.8 | 1.0% | Oct 29, 2022 | Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrar... |
| CVE-2021-36898 | HIGH | 7.2 | 0.8% | Oct 28, 2022 | Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress. |
| CVE-2021-36864 | MEDIUM | 5.4 | 0.4% | Oct 28, 2022 | Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4... |
| CVE-2021-38733 | CRITICAL | 9.8 | 0.6% | Oct 28, 2022 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php. |
| CVE-2021-38732 | CRITICAL | 9.8 | 0.7% | Oct 28, 2022 | SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php. |
| CVE-2021-38731 | CRITICAL | 9.8 | 0.6% | Oct 28, 2022 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php. |
| CVE-2021-38730 | CRITICAL | 9.8 | 0.8% | Oct 28, 2022 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php. |
| CVE-2021-38729 | CRITICAL | 9.8 | 0.8% | Oct 28, 2022 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php. |
| CVE-2021-38728 | MEDIUM | 6.1 | 0.4% | Oct 28, 2022 | SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php. |
| CVE-2021-38217 | CRITICAL | 9.8 | 0.8% | Oct 28, 2022 | SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php. |
| CVE-2021-36863 | MEDIUM | 5.4 | 0.4% | Oct 28, 2022 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3... |
| CVE-2021-36858 | MEDIUM | 4.8 | 0.4% | Oct 28, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress. |
| CVE-2021-38737 | CRITICAL | 9.8 | 0.8% | Oct 28, 2022 | SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php. |
| CVE-2021-38736 | CRITICAL | 9.8 | 0.8% | Oct 28, 2022 | SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php. |
| CVE-2021-38734 | CRITICAL | 9.8 | 0.8% | Oct 28, 2022 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php. |
| CVE-2021-37782 | CRITICAL | 9.8 | 0.8% | Oct 28, 2022 | Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php. |
| CVE-2021-37781 | MEDIUM | 5.4 | 0.4% | Oct 28, 2022 | Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now