2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25121 | MEDIUM | 6.5 | 1.2% | Jun 20, 2022 | The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of lon... |
| CVE-2021-25104 | MEDIUM | 6.1 | 1.4% | Jun 20, 2022 | The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is ac... |
| CVE-2021-25088 | MEDIUM | 4.8 | 0.6% | Jun 20, 2022 | The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug... |
| CVE-2021-45918 | HIGH | 7.5 | 1.4% | Jun 20, 2022 | NHI’s health insurance web service component has insufficient validation for input string length, which can result in he... |
| CVE-2021-46823 | MEDIUM | 6.5 | 1.7% | Jun 18, 2022 | python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions,... |
| CVE-2021-46822 | MEDIUM | 5.5 | 1.0% | Jun 18, 2022 | The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a... |
| CVE-2021-40903 | CRITICAL | 9.8 | 4.4% | Jun 17, 2022 | A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flas... |
| CVE-2021-45026 | MEDIUM | 6.1 | 1.5% | Jun 17, 2022 | ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2021-45025 | HIGH | 7.5 | 0.7% | Jun 17, 2022 | ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to C... |
| CVE-2021-45024 | CRITICAL | 9.8 | 1.3% | Jun 17, 2022 | ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to X... |
| CVE-2021-41490 | HIGH | 7.5 | 0.9% | Jun 17, 2022 | Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior. |
| CVE-2021-41408 | CRITICAL | 9.8 | 1.1% | Jun 17, 2022 | VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter. |
| CVE-2021-46820 | HIGH | 8.1 | 0.7% | Jun 16, 2022 | Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /sho... |
| CVE-2021-37764 | HIGH | 8.1 | 0.7% | Jun 16, 2022 | Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /sho... |
| CVE-2021-36609 | MEDIUM | 5.4 | 0.4% | Jun 16, 2022 | Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php. |
| CVE-2021-36608 | MEDIUM | 5.4 | 0.4% | Jun 16, 2022 | Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php. |
| CVE-2021-33295 | MEDIUM | 5.4 | 0.8% | Jun 16, 2022 | Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code du... |
| CVE-2021-41487 | CRITICAL | 9.8 | 1.6% | Jun 16, 2022 | NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'. |
| CVE-2021-36827 | MEDIUM | 4.8 | 0.5% | Jun 16, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.... |
| CVE-2021-41421 | MEDIUM | 4.8 | 0.5% | Jun 16, 2022 | A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the Maia... |
| CVE-2021-41420 | MEDIUM | 5.4 | 0.7% | Jun 16, 2022 | A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execut... |
| CVE-2021-3675 | HIGH | 7.1 | 0.3% | Jun 16, 2022 | Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized ... |
| CVE-2021-41654 | CRITICAL | 9.8 | 1.0% | Jun 16, 2022 | SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the ... |
| CVE-2021-41458 | MEDIUM | 5.5 | 0.6% | Jun 16, 2022 | In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vul... |
| CVE-2021-41411 | CRITICAL | 9.8 | 1.2% | Jun 16, 2022 | drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator cla... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now