2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32962 | MEDIUM | 6.1 | 0.7% | May 24, 2022 | The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an atta... |
| CVE-2021-4230 | HIGH | 7.5 | 0.9% | May 24, 2022 | A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /ba... |
| CVE-2021-4229 | HIGH | 8.8 | 1.3% | May 24, 2022 | A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the cryp... |
| CVE-2021-45915 | CRITICAL | 9.8 | 1.5% | May 24, 2022 | In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the ... |
| CVE-2021-45914 | CRITICAL | 9.8 | 1.5% | May 24, 2022 | In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the ... |
| CVE-2021-44975 | MEDIUM | 5.5 | 0.9% | May 24, 2022 | radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser. |
| CVE-2021-42248 | — | — | — | May 24, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-42836. Reason: This candidate is a duplicate of ... |
| CVE-2021-42656 | MEDIUM | 5.4 | 0.7% | May 24, 2022 | SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability. |
| CVE-2021-42655 | HIGH | 8.8 | 1.1% | May 24, 2022 | SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability. |
| CVE-2021-42654 | CRITICAL | 9.8 | 1.6% | May 24, 2022 | SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be use... |
| CVE-2021-42659 | MEDIUM | 6.5 | 0.8% | May 24, 2022 | There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9... |
| CVE-2021-32958 | MEDIUM | 5.5 | 0.2% | May 23, 2022 | Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows... |
| CVE-2021-42233 | MEDIUM | 5.4 | 0.8% | May 23, 2022 | The Simple Blog plugin in Wondercms 3.4.1 is vulnerable to stored cross-site scripting (XSS) vulnerability. When any use... |
| CVE-2021-32941 | CRITICAL | 9.8 | 13.3% | May 23, 2022 | Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based... |
| CVE-2021-32935 | CRITICAL | 9.8 | 1.7% | May 23, 2022 | The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which ... |
| CVE-2021-41714 | MEDIUM | 6.5 | 0.6% | May 23, 2022 | In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user... |
| CVE-2021-42586 | HIGH | 8.8 | 1.0% | May 23, 2022 | A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. |
| CVE-2021-42585 | HIGH | 8.8 | 1.0% | May 23, 2022 | A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted ... |
| CVE-2021-41834 | MEDIUM | 6.5 | 0.5% | May 23, 2022 | JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality ca... |
| CVE-2021-36833 | MEDIUM | 4.8 | 0.5% | May 20, 2022 | Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <=... |
| CVE-2021-39043 | MEDIUM | 5.4 | 0.4% | May 20, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerabil... |
| CVE-2021-43729 | MEDIUM | 5.4 | 0.6% | May 20, 2022 | Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability... |
| CVE-2021-43728 | MEDIUM | 5.4 | 0.6% | May 20, 2022 | Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability... |
| CVE-2021-30028 | HIGH | 7.2 | 1.3% | May 20, 2022 | SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account) ... |
| CVE-2021-34111 | CRITICAL | 9.8 | 2.5% | May 20, 2022 | Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.ph... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now