2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4049 | MEDIUM | 6.5 | 0.4% | Dec 7, 2021 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-29116 | MEDIUM | 6.1 | 0.8% | Dec 7, 2021 | A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only)... |
| CVE-2021-29115 | MEDIUM | 5.3 | 2.1% | Dec 7, 2021 | An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and be... |
| CVE-2021-29113 | MEDIUM | 4.7 | 0.8% | Dec 7, 2021 | A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attack... |
| CVE-2021-43784 | MEDIUM | 5 | 1.7% | Dec 6, 2021 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is ... |
| CVE-2021-43781 | MEDIUM | 4.3 | 0.7% | Dec 6, 2021 | Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. ... |
| CVE-2021-35245 | MEDIUM | 6.8 | 1.2% | Dec 6, 2021 | When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed o... |
| CVE-2021-25041 | MEDIUM | 6.1 | 0.9% | Dec 6, 2021 | The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues v... |
| CVE-2021-24939 | MEDIUM | 6.1 | 0.8% | Dec 6, 2021 | The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login... |
| CVE-2021-24938 | MEDIUM | 6.1 | 0.8% | Dec 6, 2021 | The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocs_update_profiles_da... |
| CVE-2021-24935 | MEDIUM | 6.1 | 0.9% | Dec 6, 2021 | The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family pa... |
| CVE-2021-24930 | MEDIUM | 5.4 | 0.6% | Dec 6, 2021 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name fi... |
| CVE-2021-24924 | MEDIUM | 6.1 | 0.8% | Dec 6, 2021 | The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in... |
| CVE-2021-24759 | MEDIUM | 5.4 | 0.6% | Dec 6, 2021 | The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, wh... |
| CVE-2021-24718 | MEDIUM | 4.8 | 0.6% | Dec 6, 2021 | The Contact Form, Survey & Popup Form Plugin for WordPress plugin before 1.5 does not properly sanitize some of its sett... |
| CVE-2021-24714 | MEDIUM | 4.8 | 0.6% | Dec 6, 2021 | The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier... |
| CVE-2021-43043 | MEDIUM | 6.5 | 1.4% | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files s... |
| CVE-2021-43039 | MEDIUM | 6.5 | 1.2% | Dec 6, 2021 | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anony... |
| CVE-2021-4005 | MEDIUM | 4.3 | 0.4% | Dec 4, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-35415 | MEDIUM | 4.8 | 0.9% | Dec 3, 2021 | A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafte... |
| CVE-2021-38909 | MEDIUM | 5.4 | 0.7% | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2021-29867 | MEDIUM | 5.4 | 0.8% | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should ... |
| CVE-2021-29719 | MEDIUM | 5.3 | 1.2% | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifyin... |
| CVE-2021-29716 | MEDIUM | 6.5 | 0.9% | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user shou... |
| CVE-2021-20493 | MEDIUM | 6.1 | 0.9% | Dec 3, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now