2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43778 | HIGH | 7.5 | 52.7% | Nov 24, 2021 | Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the ... |
| CVE-2021-41268 | HIGH | 8.8 | 1.3% | Nov 24, 2021 | Symfony/SecurityBundle is the security system for Symfony, a PHP framework for web and console applications and a set of... |
| CVE-2021-22957 | HIGH | 8.8 | 0.9% | Nov 24, 2021 | A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allow... |
| CVE-2021-38873 | HIGH | 7.8 | 1.8% | Nov 24, 2021 | IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary command... |
| CVE-2021-36917 | HIGH | 7.5 | 1.9% | Nov 24, 2021 | WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrie... |
| CVE-2021-34424 | HIGH | 7.5 | 1.7% | Nov 24, 2021 | A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before vers... |
| CVE-2021-21980 | HIGH | 7.5 | 4.6% | Nov 24, 2021 | The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with n... |
| CVE-2021-43780 | HIGH | 8.8 | 1.0% | Nov 24, 2021 | Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading da... |
| CVE-2021-3553 | HIGH | 7.5 | 1.3% | Nov 24, 2021 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows... |
| CVE-2021-3552 | HIGH | 7.5 | 1.4% | Nov 24, 2021 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security To... |
| CVE-2021-31822 | HIGH | 7.8 | 0.2% | Nov 24, 2021 | When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. ... |
| CVE-2021-20846 | HIGH | 8.8 | 0.7% | Nov 24, 2021 | Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allow... |
| CVE-2021-20845 | HIGH | 8.8 | 0.5% | Nov 24, 2021 | Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote at... |
| CVE-2021-20835 | HIGH | 7.5 | 1.3% | Nov 24, 2021 | Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and... |
| CVE-2021-28709 | HIGH | 7.8 | 0.3% | Nov 24, 2021 | issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text expl... |
| CVE-2021-28705 | HIGH | 7.8 | 0.3% | Nov 24, 2021 | issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text expl... |
| CVE-2021-42306 | HIGH | 8.1 | 3.1% | Nov 24, 2021 | An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as ... |
| CVE-2021-28708 | HIGH | 8.8 | 0.3% | Nov 24, 2021 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects... |
| CVE-2021-28707 | HIGH | 8.8 | 0.3% | Nov 24, 2021 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects... |
| CVE-2021-28706 | HIGH | 8.6 | 2.1% | Nov 24, 2021 | guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be ab... |
| CVE-2021-28704 | HIGH | 8.8 | 0.3% | Nov 24, 2021 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects... |
| CVE-2021-38003 | HIGH | 8.8 | 36.2% | Nov 23, 2021 | Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo... |
| CVE-2021-38001 | HIGH | 8.8 | 26.7% | Nov 23, 2021 | Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corrup... |
| CVE-2021-37998 | HIGH | 8.8 | 0.9% | Nov 23, 2021 | Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exp... |
| CVE-2021-37997 | HIGH | 8.8 | 0.9% | Nov 23, 2021 | Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now