2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25040 | MEDIUM | 6.1 | 0.8% | Jan 3, 2022 | The Booking Calendar WordPress plugin before 8.9.2 does not sanitise and escape the booking_type parameter before output... |
| CVE-2021-25027 | MEDIUM | 6.1 | 0.9% | Jan 3, 2022 | The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it ... |
| CVE-2021-25022 | MEDIUM | 6.1 | 1.1% | Jan 3, 2022 | The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestam... |
| CVE-2021-25021 | MEDIUM | 4.9 | 1.0% | Jan 3, 2022 | The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allow... |
| CVE-2021-25020 | MEDIUM | 4.9 | 1.0% | Jan 3, 2022 | The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, al... |
| CVE-2021-25016 | MEDIUM | 6.1 | 1.8% | Jan 3, 2022 | The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the searc... |
| CVE-2021-25001 | MEDIUM | 6.1 | 0.8% | Jan 3, 2022 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_resul... |
| CVE-2021-25000 | MEDIUM | 6.1 | 0.8% | Jan 3, 2022 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter bef... |
| CVE-2021-24999 | MEDIUM | 6.1 | 0.8% | Jan 3, 2022 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before o... |
| CVE-2021-24991 | MEDIUM | 4.8 | 1.2% | Jan 3, 2022 | The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section paramete... |
| CVE-2021-24973 | MEDIUM | 6.1 | 1.3% | Jan 3, 2022 | The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_acti... |
| CVE-2021-24964 | MEDIUM | 6.1 | 1.2% | Jan 3, 2022 | The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud serv... |
| CVE-2021-24963 | MEDIUM | 4.8 | 0.7% | Jan 3, 2022 | The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the ... |
| CVE-2021-24828 | MEDIUM | 5.4 | 0.6% | Jan 3, 2022 | The Mortgage Calculator / Loan Calculator WordPress plugin before 1.5.17 does not escape the some of the attributes of i... |
| CVE-2021-24680 | MEDIUM | 5.4 | 0.6% | Jan 3, 2022 | The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activit... |
| CVE-2021-35093 | MEDIUM | 6.5 | 0.2% | Jan 3, 2022 | Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial... |
| CVE-2021-30348 | MEDIUM | 6.5 | 0.2% | Jan 3, 2022 | Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Comp... |
| CVE-2021-30283 | MEDIUM | 5.5 | 0.1% | Jan 3, 2022 | Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer... |
| CVE-2021-30278 | MEDIUM | 5.5 | 0.1% | Jan 3, 2022 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, ... |
| CVE-2021-1918 | MEDIUM | 6.5 | 0.1% | Jan 3, 2022 | Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT... |
| CVE-2021-36751 | MEDIUM | 4.2 | 0.5% | Jan 2, 2022 | ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (w... |
| CVE-2021-44896 | MEDIUM | 6.1 | 0.9% | Jan 1, 2022 | DMP Roadmap before 3.0.4 allows XSS. |
| CVE-2021-43333 | MEDIUM | 6.5 | 0.7% | Jan 1, 2022 | The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or... |
| CVE-2021-44717 | MEDIUM | 4.8 | 1.9% | Jan 1, 2022 | Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network c... |
| CVE-2021-45943 | MEDIUM | 5.5 | 1.5% | Jan 1, 2022 | GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCI... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now