2021 CVE Vulnerabilities

23,476 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-3481HIGH7.1A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/...
CVE-2021-3442MEDIUM5.4A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated ...
CVE-2021-37289HIGH7.2Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system c...
CVE-2021-36857MEDIUM5.4Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6....
CVE-2021-36852HIGH8Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.
CVE-2021-36847MEDIUM4.8Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at...
CVE-2021-24912MEDIUM5.4The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX ac...
CVE-2021-24911MEDIUM5.4The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from th...
CVE-2021-24910MEDIUM6.1The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJ...
CVE-2021-44545MEDIUM6.5Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticat...
CVE-2021-44470MEDIUM5.5Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authentic...
CVE-2021-37409HIGH7.8Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user ...
CVE-2021-33847HIGH7.8Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products be...
CVE-2021-33128MEDIUM4.4Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a p...
CVE-2021-33126MEDIUM4.4Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before ve...
CVE-2021-33060HIGH7.8Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially ena...
CVE-2021-26950MEDIUM5.5Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before versi...
CVE-2021-26257MEDIUM5.5Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products be...
CVE-2021-26254MEDIUM5.5Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to po...
CVE-2021-23223HIGH7.8Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user ...
CVE-2021-23188LOW3.3Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated u...
CVE-2021-23179HIGH7.1Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before versi...
CVE-2021-23168MEDIUM6.5Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user...
CVE-2021-32862MEDIUM5.4The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using...
CVE-2021-30071MEDIUM6.1A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execute...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now