2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32591 | MEDIUM | 5.3 | 0.9% | Dec 8, 2021 | A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSan... |
| CVE-2021-4050 | MEDIUM | 6.1 | 0.9% | Dec 8, 2021 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-42757 | MEDIUM | 6.7 | 0.5% | Dec 8, 2021 | A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allo... |
| CVE-2021-31850 | MEDIUM | 6.1 | 1.0% | Dec 8, 2021 | A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator ... |
| CVE-2021-44726 | MEDIUM | 6.1 | 0.7% | Dec 8, 2021 | KNIME Server before 4.13.4 allows XSS via the old WebPortal login page. |
| CVE-2021-41309 | MEDIUM | 5.3 | 0.8% | Dec 8, 2021 | Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access... |
| CVE-2021-3370 | MEDIUM | 6.1 | 0.6% | Dec 8, 2021 | DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php. |
| CVE-2021-43808 | MEDIUM | 6.1 | 0.8% | Dec 8, 2021 | Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-s... |
| CVE-2021-44148 | MEDIUM | 6.1 | 0.6% | Dec 7, 2021 | GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an a... |
| CVE-2021-43810 | MEDIUM | 6.1 | 5.8% | Dec 7, 2021 | Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vu... |
| CVE-2021-42567 | MEDIUM | 6.1 | 8.1% | Dec 7, 2021 | Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints. |
| CVE-2021-36760 | MEDIUM | 6.1 | 0.7% | Dec 7, 2021 | In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS a... |
| CVE-2021-34544 | MEDIUM | 6.5 | 1.0% | Dec 7, 2021 | An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cl... |
| CVE-2021-37940 | MEDIUM | 6.8 | 0.8% | Dec 7, 2021 | An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Se... |
| CVE-2021-37085 | MEDIUM | 5.9 | 0.5% | Dec 7, 2021 | There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to ... |
| CVE-2021-37082 | MEDIUM | 5.9 | 0.4% | Dec 7, 2021 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to m... |
| CVE-2021-37058 | MEDIUM | 5.3 | 0.5% | Dec 7, 2021 | There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this... |
| CVE-2021-37056 | MEDIUM | 5.3 | 0.5% | Dec 7, 2021 | There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability... |
| CVE-2021-37055 | MEDIUM | 5.3 | 0.6% | Dec 7, 2021 | There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attem... |
| CVE-2021-44527 | MEDIUM | 6.5 | 0.4% | Dec 7, 2021 | A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gain... |
| CVE-2021-40096 | MEDIUM | 5.4 | 0.7% | Dec 7, 2021 | A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote a... |
| CVE-2021-40095 | MEDIUM | 4.9 | 1.0% | Dec 7, 2021 | An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptib... |
| CVE-2021-40094 | MEDIUM | 5.4 | 0.5% | Dec 7, 2021 | A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may a... |
| CVE-2021-40093 | MEDIUM | 5.4 | 0.6% | Dec 7, 2021 | A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote a... |
| CVE-2021-40092 | MEDIUM | 5.4 | 0.6% | Dec 7, 2021 | A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inj... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now