2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40313 | HIGH | 8.8 | 1.1% | Dec 6, 2021 | Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager... |
| CVE-2021-43800 | HIGH | 7.5 | 1.7% | Dec 6, 2021 | Wiki.js is a wiki app built on Node.js. Prior to version 2.5.254, directory traversal outside of Wiki.js context is poss... |
| CVE-2021-22170 | HIGH | 7.5 | 0.5% | Dec 6, 2021 | Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encr... |
| CVE-2021-36198 | HIGH | 7.5 | 1.1% | Dec 6, 2021 | Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data. |
| CVE-2021-35242 | HIGH | 8.8 | 0.7% | Dec 6, 2021 | Serv-U server responds with valid CSRFToken when the request contains only Session. |
| CVE-2021-24917 | HIGH | 7.5 | 71.5% | Dec 6, 2021 | The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random... |
| CVE-2021-24914 | HIGH | 8 | 0.5% | Dec 6, 2021 | The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawkto_setwidget and... |
| CVE-2021-43471 | HIGH | 7.5 | 1.4% | Dec 6, 2021 | In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can rem... |
| CVE-2021-4069 | HIGH | 7.8 | 1.3% | Dec 6, 2021 | vim is vulnerable to Use After Free |
| CVE-2021-43469 | HIGH | 8.8 | 2.3% | Dec 6, 2021 | VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component. |
| CVE-2021-43041 | HIGH | 8.8 | 2.3% | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format... |
| CVE-2021-43040 | HIGH | 8.8 | 1.8% | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged vaultServer could be leverage... |
| CVE-2021-43038 | HIGH | 8.8 | 2.2% | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account could execute commands by... |
| CVE-2021-43037 | HIGH | 7.8 | 0.5% | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable t... |
| CVE-2021-43034 | HIGH | 7.8 | 0.4% | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A world writable file allowed local users to... |
| CVE-2021-44048 | HIGH | 7.8 | 0.8% | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer b... |
| CVE-2021-44047 | HIGH | 7.8 | 0.9% | Dec 5, 2021 | A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.1... |
| CVE-2021-44046 | HIGH | 7.8 | 0.8% | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An un... |
| CVE-2021-44045 | HIGH | 7.8 | 0.8% | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.... |
| CVE-2021-44044 | HIGH | 7.8 | 0.8% | Dec 5, 2021 | An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.... |
| CVE-2021-37253 | HIGH | 7.5 | 2.8% | Dec 5, 2021 | M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range o... |
| CVE-2021-43415 | HIGH | 8.8 | 1.2% | Dec 3, 2021 | HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenti... |
| CVE-2021-35413 | HIGH | 8.8 | 2.5% | Dec 3, 2021 | A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated a... |
| CVE-2021-23562 | HIGH | 8.8 | 1.0% | Dec 3, 2021 | This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An att... |
| CVE-2021-29756 | HIGH | 8.8 | 0.6% | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which cou... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now