2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38507 | MEDIUM | 6.5 | 0.8% | Dec 8, 2021 | The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while r... |
| CVE-2021-38506 | MEDIUM | 4.3 | 1.5% | Dec 8, 2021 | Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user.... |
| CVE-2021-38505 | MEDIUM | 6.5 | 1.1% | Dec 8, 2021 | Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to ... |
| CVE-2021-23861 | MEDIUM | 6.5 | 0.8% | Dec 8, 2021 | By executing a special command, an user with administrative rights can get access to extended debug functionality on the... |
| CVE-2021-23860 | MEDIUM | 6.1 | 0.5% | Dec 8, 2021 | An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To ... |
| CVE-2021-36720 | MEDIUM | 6.1 | 0.6% | Dec 8, 2021 | PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies ... |
| CVE-2021-36718 | MEDIUM | 6.5 | 0.5% | Dec 8, 2021 | SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report... |
| CVE-2021-41021 | MEDIUM | 6.7 | 0.3% | Dec 8, 2021 | A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to... |
| CVE-2021-41013 | MEDIUM | 5.3 | 0.9% | Dec 8, 2021 | An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Repo... |
| CVE-2021-36188 | MEDIUM | 6.1 | 0.7% | Dec 8, 2021 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.... |
| CVE-2021-37093 | MEDIUM | 5.3 | 0.5% | Dec 8, 2021 | There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may ... |
| CVE-2021-37039 | MEDIUM | 6.5 | 0.3% | Dec 8, 2021 | There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus... |
| CVE-2021-25526 | MEDIUM | 5.5 | 0.2% | Dec 8, 2021 | Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privi... |
| CVE-2021-25525 | MEDIUM | 6.5 | 0.3% | Dec 8, 2021 | Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows... |
| CVE-2021-25520 | MEDIUM | 6.1 | 0.4% | Dec 8, 2021 | Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.... |
| CVE-2021-25518 | MEDIUM | 6.7 | 0.1% | Dec 8, 2021 | An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write ... |
| CVE-2021-25514 | MEDIUM | 6.5 | 0.2% | Dec 8, 2021 | An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive inf... |
| CVE-2021-43063 | MEDIUM | 6.1 | 0.9% | Dec 8, 2021 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.... |
| CVE-2021-36190 | MEDIUM | 6.3 | 0.8% | Dec 8, 2021 | A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below al... |
| CVE-2021-43064 | MEDIUM | 6.1 | 0.6% | Dec 8, 2021 | A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and b... |
| CVE-2021-41015 | MEDIUM | 6.1 | 0.8% | Dec 8, 2021 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.... |
| CVE-2021-36191 | MEDIUM | 5.4 | 0.5% | Dec 8, 2021 | A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below all... |
| CVE-2021-43067 | MEDIUM | 6.5 | 1.1% | Dec 8, 2021 | A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2... |
| CVE-2021-42752 | MEDIUM | 5.4 | 0.5% | Dec 8, 2021 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.... |
| CVE-2021-41029 | MEDIUM | 5.4 | 0.5% | Dec 8, 2021 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now