2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25988 | MEDIUM | 5.4 | 0.6% | Dec 29, 2021 | In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can b... |
| CVE-2021-44832 | MEDIUM | 6.6 | 97.9% | Dec 28, 2021 | Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a r... |
| CVE-2021-45813 | MEDIUM | 6.1 | 0.6% | Dec 28, 2021 | SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability. The attacker can steal the user's ses... |
| CVE-2021-45812 | MEDIUM | 6.1 | 0.8% | Dec 28, 2021 | NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS) vulnerability. An attacker can ste... |
| CVE-2021-45903 | MEDIUM | 6.1 | 1.1% | Dec 28, 2021 | A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x bef... |
| CVE-2021-45425 | MEDIUM | 6.1 | 3.4% | Dec 28, 2021 | Reflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote attackers to execute JavaScrip... |
| CVE-2021-40579 | MEDIUM | 6.5 | 0.8% | Dec 28, 2021 | https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected b... |
| CVE-2021-4179 | MEDIUM | 5.4 | 0.5% | Dec 28, 2021 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-4177 | MEDIUM | 5.3 | 0.9% | Dec 28, 2021 | livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information |
| CVE-2021-45906 | MEDIUM | 5.4 | 0.5% | Dec 27, 2021 | OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen. |
| CVE-2021-45905 | MEDIUM | 5.4 | 0.5% | Dec 27, 2021 | OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen. |
| CVE-2021-45904 | MEDIUM | 5.4 | 0.5% | Dec 27, 2021 | OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen. |
| CVE-2021-45895 | MEDIUM | 6.1 | 0.7% | Dec 27, 2021 | Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface. |
| CVE-2021-43552 | MEDIUM | 5.5 | 0.2% | Dec 27, 2021 | The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from t... |
| CVE-2021-43550 | MEDIUM | 6.5 | 0.2% | Dec 27, 2021 | The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive... |
| CVE-2021-43548 | MEDIUM | 6.5 | 0.4% | Dec 27, 2021 | Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrect... |
| CVE-2021-35232 | MEDIUM | 6.1 | 0.3% | Dec 27, 2021 | Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with loca... |
| CVE-2021-43856 | MEDIUM | 5.4 | 0.9% | Dec 27, 2021 | Wiki.js is a wiki app built on Node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through... |
| CVE-2021-43855 | MEDIUM | 5.4 | 0.9% | Dec 27, 2021 | Wiki.js is a wiki app built on node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through... |
| CVE-2021-38961 | MEDIUM | 6.1 | 0.6% | Dec 27, 2021 | IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c... |
| CVE-2021-24997 | MEDIUM | 6.5 | 2.8% | Dec 27, 2021 | The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any... |
| CVE-2021-24992 | MEDIUM | 4.8 | 0.6% | Dec 27, 2021 | The Smart Floating / Sticky Buttons WordPress plugin before 2.5.5 does not sanitise and escape some parameter before out... |
| CVE-2021-24988 | MEDIUM | 5.4 | 0.3% | Dec 27, 2021 | The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the Syste... |
| CVE-2021-24984 | MEDIUM | 6.1 | 0.8% | Dec 27, 2021 | The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved paramete... |
| CVE-2021-24980 | MEDIUM | 6.1 | 0.8% | Dec 27, 2021 | The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter befor... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now