2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39043 | MEDIUM | 5.4 | 0.4% | May 20, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerabil... |
| CVE-2021-43729 | MEDIUM | 5.4 | 0.6% | May 20, 2022 | Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability... |
| CVE-2021-43728 | MEDIUM | 5.4 | 0.6% | May 20, 2022 | Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability... |
| CVE-2021-30028 | HIGH | 7.2 | 1.3% | May 20, 2022 | SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account) ... |
| CVE-2021-34111 | CRITICAL | 9.8 | 2.5% | May 20, 2022 | Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.ph... |
| CVE-2021-32934 | HIGH | 7.5 | 0.6% | May 19, 2022 | The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not... |
| CVE-2021-45730 | MEDIUM | 4.9 | 0.5% | May 19, 2022 | JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit... |
| CVE-2021-37413 | CRITICAL | 9.8 | 1.8% | May 19, 2022 | GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated... |
| CVE-2021-26631 | HIGH | 7.5 | 1.0% | May 19, 2022 | Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote... |
| CVE-2021-26630 | CRITICAL | 9.8 | 0.7% | May 19, 2022 | Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbi... |
| CVE-2021-41938 | HIGH | 7.2 | 1.0% | May 19, 2022 | An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulne... |
| CVE-2021-38944 | MEDIUM | 6.1 | 0.5% | May 18, 2022 | IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnera... |
| CVE-2021-42704 | HIGH | 7.8 | 1.3% | May 18, 2022 | Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code. |
| CVE-2021-42702 | LOW | 3.3 | 0.8% | May 18, 2022 | Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized in... |
| CVE-2021-42700 | LOW | 3.3 | 0.7% | May 18, 2022 | Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized informa... |
| CVE-2021-42852 | HIGH | 8 | 0.8% | May 18, 2022 | A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authent... |
| CVE-2021-42851 | MEDIUM | 5.3 | 0.5% | May 18, 2022 | A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to c... |
| CVE-2021-42850 | HIGH | 7.8 | 0.2% | May 18, 2022 | A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud S... |
| CVE-2021-42849 | MEDIUM | 6.8 | 0.2% | May 18, 2022 | A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow ... |
| CVE-2021-42848 | MEDIUM | 5.3 | 0.7% | May 18, 2022 | An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an u... |
| CVE-2021-3969 | HIGH | 7 | 1.8% | May 18, 2022 | A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System I... |
| CVE-2021-3956 | MEDIUM | 5.3 | 0.7% | May 18, 2022 | A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Contro... |
| CVE-2021-3922 | HIGH | 7 | 1.8% | May 18, 2022 | A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation,... |
| CVE-2021-27548 | MEDIUM | 5.5 | 0.7% | May 18, 2022 | There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03. |
| CVE-2021-41946 | MEDIUM | 5.4 | 2.4% | May 18, 2022 | In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now