2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24705 | MEDIUM | 4.8 | 0.3% | Dec 13, 2021 | The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape ... |
| CVE-2021-20867 | MEDIUM | 6.5 | 1.4% | Dec 13, 2021 | Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing au... |
| CVE-2021-20866 | MEDIUM | 6.5 | 1.7% | Dec 13, 2021 | Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing au... |
| CVE-2021-44155 | MEDIUM | 5.3 | 1.8% | Dec 13, 2021 | An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response i... |
| CVE-2021-40858 | MEDIUM | 4.9 | 2.4% | Dec 13, 2021 | Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin pa... |
| CVE-2021-44848 | MEDIUM | 5.3 | 23.1% | Dec 13, 2021 | In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication reques... |
| CVE-2021-4097 | MEDIUM | 5.4 | 0.8% | Dec 12, 2021 | phpservermon is vulnerable to Improper Neutralization of CRLF Sequences |
| CVE-2021-4092 | MEDIUM | 4.3 | 0.4% | Dec 11, 2021 | yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-43815 | MEDIUM | 4.3 | 1.8% | Dec 10, 2021 | Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a di... |
| CVE-2021-4089 | MEDIUM | 4.3 | 0.7% | Dec 10, 2021 | snipe-it is vulnerable to Improper Access Control |
| CVE-2021-31747 | MEDIUM | 4.8 | 0.3% | Dec 10, 2021 | Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in update_applet.php, which could lead to man-in-the-mid... |
| CVE-2021-43813 | MEDIUM | 4.3 | 58.0% | Dec 10, 2021 | Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains... |
| CVE-2021-38937 | MEDIUM | 6.5 | 1.0% | Dec 10, 2021 | IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a s... |
| CVE-2021-36911 | MEDIUM | 5.4 | 0.6% | Dec 10, 2021 | Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Comment Engine Pro plugin (versions <= 1.0), cou... |
| CVE-2021-3829 | MEDIUM | 6.1 | 0.8% | Dec 10, 2021 | openwhyd is vulnerable to URL Redirection to Untrusted Site |
| CVE-2021-40834 | MEDIUM | 4.3 | 0.7% | Dec 10, 2021 | A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a special... |
| CVE-2021-37187 | MEDIUM | 6.5 | 0.7% | Dec 10, 2021 | An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file... |
| CVE-2021-4084 | MEDIUM | 6.1 | 1.6% | Dec 10, 2021 | pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-4082 | MEDIUM | 4.3 | 0.4% | Dec 10, 2021 | pimcore is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-4081 | MEDIUM | 6.1 | 0.8% | Dec 10, 2021 | pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-4033 | MEDIUM | 6.5 | 0.5% | Dec 9, 2021 | kimai2 is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-43797 | MEDIUM | 6.5 | 2.9% | Dec 9, 2021 | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performan... |
| CVE-2021-38931 | MEDIUM | 6.5 | 1.2% | Dec 9, 2021 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclos... |
| CVE-2021-38926 | MEDIUM | 5.5 | 0.3% | Dec 9, 2021 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us... |
| CVE-2021-4038 | MEDIUM | 4.8 | 0.6% | Dec 9, 2021 | Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now