2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41697 | MEDIUM | 6.1 | 0.7% | Dec 9, 2021 | A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description pa... |
| CVE-2021-41696 | MEDIUM | 6.5 | 0.9% | Dec 9, 2021 | An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password r... |
| CVE-2021-20137 | MEDIUM | 6.1 | 2.6% | Dec 9, 2021 | A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the... |
| CVE-2021-22565 | MEDIUM | 6.5 | 0.4% | Dec 9, 2021 | An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable t... |
| CVE-2021-42759 | MEDIUM | 6.7 | 0.3% | Dec 9, 2021 | A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows atta... |
| CVE-2021-36167 | MEDIUM | 5.3 | 0.6% | Dec 9, 2021 | An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 an... |
| CVE-2021-43410 | MEDIUM | 5.3 | 2.4% | Dec 9, 2021 | Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some ... |
| CVE-2021-43204 | MEDIUM | 4.4 | 0.3% | Dec 9, 2021 | A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.... |
| CVE-2021-36189 | MEDIUM | 4.9 | 0.4% | Dec 9, 2021 | A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allow... |
| CVE-2021-43546 | MEDIUM | 4.3 | 1.4% | Dec 8, 2021 | It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerabili... |
| CVE-2021-43545 | MEDIUM | 6.5 | 1.6% | Dec 8, 2021 | Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thun... |
| CVE-2021-43544 | MEDIUM | 6.1 | 0.5% | Dec 8, 2021 | When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the addre... |
| CVE-2021-43543 | MEDIUM | 6.1 | 1.4% | Dec 8, 2021 | Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additio... |
| CVE-2021-43542 | MEDIUM | 6.5 | 1.7% | Dec 8, 2021 | Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading ext... |
| CVE-2021-43541 | MEDIUM | 6.5 | 1.6% | Dec 8, 2021 | When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly esca... |
| CVE-2021-43540 | MEDIUM | 6.5 | 0.9% | Dec 8, 2021 | WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that ... |
| CVE-2021-43538 | MEDIUM | 4.3 | 1.2% | Dec 8, 2021 | By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that ha... |
| CVE-2021-43536 | MEDIUM | 6.5 | 1.7% | Dec 8, 2021 | Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. Th... |
| CVE-2021-43533 | MEDIUM | 4.3 | 0.5% | Dec 8, 2021 | When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting ... |
| CVE-2021-43532 | MEDIUM | 6.1 | 0.5% | Dec 8, 2021 | The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that tri... |
| CVE-2021-43531 | MEDIUM | 4.3 | 0.3% | Dec 8, 2021 | When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element cl... |
| CVE-2021-43530 | MEDIUM | 6.1 | 1.4% | Dec 8, 2021 | A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a ... |
| CVE-2021-43528 | MEDIUM | 6.5 | 1.3% | Dec 8, 2021 | Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to thi... |
| CVE-2021-38509 | MEDIUM | 4.3 | 1.6% | Dec 8, 2021 | Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled)... |
| CVE-2021-38508 | MEDIUM | 4.3 | 1.5% | Dec 8, 2021 | By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolo... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now