2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43771 | HIGH | 7.8 | 0.3% | Nov 30, 2021 | Trend Micro Antivirus for Mac 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulne... |
| CVE-2021-42123 | HIGH | 8.8 | 1.0% | Nov 30, 2021 | Unrestricted File Upload in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1... |
| CVE-2021-3725 | HIGH | 8.8 | 1.1% | Nov 30, 2021 | Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered... |
| CVE-2021-43790 | HIGH | 8.1 | 1.6% | Nov 30, 2021 | Lucet is a native WebAssembly compiler and runtime. There is a bug in the main branch of `lucet-runtime` affecting all v... |
| CVE-2021-44429 | HIGH | 7.5 | 1.9% | Nov 29, 2021 | Serva 4.4.0 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcod... |
| CVE-2021-44428 | HIGH | 7.5 | 2.9% | Nov 29, 2021 | Pinkie 2.15 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcod... |
| CVE-2021-43786 | HIGH | 7.5 | 2.3% | Nov 29, 2021 | Nodebb is an open source Node.js based forum software. In affected versions incorrect logic present in the token verific... |
| CVE-2021-43783 | HIGH | 8.5 | 1.2% | Nov 29, 2021 | @backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a... |
| CVE-2021-34800 | HIGH | 7.5 | 1.0% | Nov 29, 2021 | Sensitive information could be logged. The following products are affected: Acronis Agent (Windows, Linux, macOS) before... |
| CVE-2021-44198 | HIGH | 7.8 | 0.2% | Nov 29, 2021 | DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 (W... |
| CVE-2021-42364 | HIGH | 8.8 | 0.6% | Nov 29, 2021 | The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the stats_pa... |
| CVE-2021-42358 | HIGH | 8.8 | 0.6% | Nov 29, 2021 | The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validati... |
| CVE-2021-24889 | HIGH | 7.2 | 1.3% | Nov 29, 2021 | The Ninja Forms Contact Form WordPress plugin before 3.6.4 does not escape keys of the fields POST parameter, which coul... |
| CVE-2021-24860 | HIGH | 7.2 | 1.3% | Nov 29, 2021 | The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before u... |
| CVE-2021-24755 | HIGH | 8.8 | 1.3% | Nov 29, 2021 | The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL stateme... |
| CVE-2021-24748 | HIGH | 8.8 | 1.3% | Nov 29, 2021 | The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET pa... |
| CVE-2021-38283 | HIGH | 7.5 | 2.4% | Nov 29, 2021 | Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read application log files containing se... |
| CVE-2021-38147 | HIGH | 7.5 | 53.0% | Nov 29, 2021 | Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as report... |
| CVE-2021-44094 | HIGH | 7.8 | 1.4% | Nov 28, 2021 | ZrLog 2.2.2 has a remote command execution vulnerability at plugin download function, it could execute any JAR file |
| CVE-2021-41279 | HIGH | 8.8 | 1.6% | Nov 26, 2021 | BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions use... |
| CVE-2021-41243 | HIGH | 8.8 | 2.2% | Nov 26, 2021 | There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS.... |
| CVE-2021-35533 | HIGH | 7.5 | 0.9% | Nov 26, 2021 | Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-... |
| CVE-2021-26615 | HIGH | 8.8 | 0.6% | Nov 26, 2021 | ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW functi... |
| CVE-2021-36807 | HIGH | 8.8 | 1.5% | Nov 26, 2021 | An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before versi... |
| CVE-2021-38686 | HIGH | 8.8 | 0.9% | Nov 26, 2021 | An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerabil... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now