2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43823 | MEDIUM | 6.5 | 0.8% | Dec 13, 2021 | Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel ... |
| CVE-2021-43817 | MEDIUM | 6.1 | 0.6% | Dec 13, 2021 | Collabora Online is a collaborative online office suite based on LibreOffice technology. In affected versions a reflecte... |
| CVE-2021-39048 | MEDIUM | 5.5 | 0.3% | Dec 13, 2021 | IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checki... |
| CVE-2021-38901 | MEDIUM | 5.5 | 0.2% | Dec 13, 2021 | IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sens... |
| CVE-2021-39054 | MEDIUM | 5.4 | 0.6% | Dec 13, 2021 | IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the ... |
| CVE-2021-40007 | MEDIUM | 6.5 | 0.5% | Dec 13, 2021 | There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log ... |
| CVE-2021-39941 | MEDIUM | 5.3 | 1.2% | Dec 13, 2021 | An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allo... |
| CVE-2021-39940 | MEDIUM | 6.5 | 1.5% | Dec 13, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions start... |
| CVE-2021-39939 | MEDIUM | 6.5 | 0.9% | Dec 13, 2021 | An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.... |
| CVE-2021-39938 | MEDIUM | 6.5 | 0.9% | Dec 13, 2021 | A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.... |
| CVE-2021-39936 | MEDIUM | 4.3 | 1.0% | Dec 13, 2021 | Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting f... |
| CVE-2021-39934 | MEDIUM | 4.3 | 0.9% | Dec 13, 2021 | Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions st... |
| CVE-2021-39933 | MEDIUM | 6.5 | 1.4% | Dec 13, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions star... |
| CVE-2021-39932 | MEDIUM | 4.3 | 0.9% | Dec 13, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions start... |
| CVE-2021-39931 | MEDIUM | 4.3 | 0.9% | Dec 13, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions start... |
| CVE-2021-39930 | MEDIUM | 4.3 | 0.8% | Dec 13, 2021 | Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 1... |
| CVE-2021-39919 | MEDIUM | 4.4 | 0.3% | Dec 13, 2021 | In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all ... |
| CVE-2021-39918 | MEDIUM | 4.3 | 0.7% | Dec 13, 2021 | Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting from... |
| CVE-2021-39917 | MEDIUM | 6.5 | 1.3% | Dec 13, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions start... |
| CVE-2021-39916 | MEDIUM | 4.3 | 0.8% | Dec 13, 2021 | Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the conf... |
| CVE-2021-39915 | MEDIUM | 5.3 | 1.1% | Dec 13, 2021 | Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all ... |
| CVE-2021-39910 | MEDIUM | 4.3 | 1.0% | Dec 13, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions start... |
| CVE-2021-36169 | MEDIUM | 6 | 0.3% | Dec 13, 2021 | A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unaut... |
| CVE-2021-42549 | MEDIUM | 6.1 | 0.7% | Dec 13, 2021 | Insufficient Input Validation in the search functionality of Wordpress plugin Lets-Box prior to 1.15.3 allows unauthenti... |
| CVE-2021-42548 | MEDIUM | 6.1 | 0.7% | Dec 13, 2021 | Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows una... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now