2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30651 | MEDIUM | 4.9 | 0.7% | Jun 24, 2022 | A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that th... |
| CVE-2021-40892 | HIGH | 7.5 | 1.1% | Jun 24, 2022 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2.1.0 when handling craft... |
| CVE-2021-41639 | MEDIUM | 5.5 | 0.2% | Jun 24, 2022 | MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file. |
| CVE-2021-41638 | HIGH | 7.5 | 1.6% | Jun 24, 2022 | The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to a... |
| CVE-2021-41637 | HIGH | 7.1 | 0.3% | Jun 24, 2022 | Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configurati... |
| CVE-2021-41636 | MEDIUM | 6.5 | 1.3% | Jun 24, 2022 | MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and op... |
| CVE-2021-41635 | HIGH | 8.8 | 1.9% | Jun 24, 2022 | When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse... |
| CVE-2021-41634 | MEDIUM | 5.3 | 0.9% | Jun 24, 2022 | A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames. |
| CVE-2021-34604 | — | — | — | Jun 24, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. It... |
| CVE-2021-46824 | MEDIUM | 5.4 | 0.9% | Jun 23, 2022 | Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter ... |
| CVE-2021-41432 | MEDIUM | 5.4 | 1.7% | Jun 23, 2022 | A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaS... |
| CVE-2021-40956 | HIGH | 7.5 | 1.0% | Jun 23, 2022 | LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obta... |
| CVE-2021-40955 | HIGH | 7.2 | 0.9% | Jun 23, 2022 | SQL injection exists in LaiKetui v3.5.0 the background administrator list. |
| CVE-2021-40954 | CRITICAL | 9.8 | 1.6% | Jun 23, 2022 | Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary cod... |
| CVE-2021-29055 | MEDIUM | 6.1 | 0.8% | Jun 23, 2022 | Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Firtstname paramete... |
| CVE-2021-26638 | CRITICAL | 9.8 | 3.4% | Jun 23, 2022 | Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and inform... |
| CVE-2021-26637 | CRITICAL | 9.8 | 1.7% | Jun 23, 2022 | There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-... |
| CVE-2021-26636 | CRITICAL | 9.6 | 1.4% | Jun 23, 2022 | Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to in... |
| CVE-2021-40511 | HIGH | 7.5 | 0.9% | Jun 21, 2022 | OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service. |
| CVE-2021-40510 | HIGH | 7.5 | 1.2% | Jun 21, 2022 | XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs. |
| CVE-2021-36761 | MEDIUM | 5.3 | 1.1% | Jun 21, 2022 | The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF. |
| CVE-2021-39006 | MEDIUM | 5.3 | 0.8% | Jun 21, 2022 | IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best ... |
| CVE-2021-41924 | MEDIUM | 6.1 | 0.6% | Jun 21, 2022 | Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2021-41683 | HIGH | 7.8 | 0.7% | Jun 20, 2022 | There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0 |
| CVE-2021-41682 | HIGH | 7.8 | 0.7% | Jun 20, 2022 | There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now