2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35249 | MEDIUM | 4.3 | 0.6% | May 17, 2022 | This broken access control vulnerability pertains specifically to a domain admin who can access configuration & user dat... |
| CVE-2021-38872 | HIGH | 7.5 | 1.4% | May 17, 2022 | IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a re... |
| CVE-2021-29726 | MEDIUM | 5.3 | 0.8% | May 17, 2022 | IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a cert... |
| CVE-2021-42644 | MEDIUM | 6.5 | 0.9% | May 17, 2022 | cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file informa... |
| CVE-2021-42643 | HIGH | 8.8 | 1.6% | May 17, 2022 | cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script f... |
| CVE-2021-42943 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrar... |
| CVE-2021-33025 | HIGH | 7.8 | 0.3% | May 16, 2022 | xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges. |
| CVE-2021-33021 | MEDIUM | 6.1 | 0.7% | May 16, 2022 | xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisa... |
| CVE-2021-33001 | MEDIUM | 6.1 | 0.7% | May 16, 2022 | xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisv... |
| CVE-2021-27446 | CRITICAL | 9.8 | 2.6% | May 16, 2022 | The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to exec... |
| CVE-2021-27444 | CRITICAL | 9.8 | 1.1% | May 16, 2022 | The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attac... |
| CVE-2021-27442 | MEDIUM | 6.1 | 0.8% | May 16, 2022 | The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated... |
| CVE-2021-23267 | HIGH | 8.8 | 0.8% | May 16, 2022 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat... |
| CVE-2021-23266 | MEDIUM | 4.3 | 0.5% | May 16, 2022 | An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual mess... |
| CVE-2021-23265 | MEDIUM | 4.3 | 0.5% | May 16, 2022 | A logged-in and authenticated user with a Reviewer Role may lock a content item. |
| CVE-2021-33318 | CRITICAL | 9.8 | 1.9% | May 16, 2022 | An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below... |
| CVE-2021-25119 | HIGH | 7.2 | 1.4% | May 16, 2022 | The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating t... |
| CVE-2021-42966 | — | — | — | May 16, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-42897 | CRITICAL | 9.8 | 2.4% | May 16, 2022 | A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $_POST[... |
| CVE-2021-42870 | HIGH | 7.5 | 1.0% | May 16, 2022 | ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request. |
| CVE-2021-41927 | — | — | — | May 16, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-41965 | HIGH | 8.8 | 1.1% | May 15, 2022 | A SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an authenticated attacker to issue ... |
| CVE-2021-33013 | HIGH | 7.5 | 0.8% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information. |
| CVE-2021-33009 | HIGH | 7.5 | 1.1% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file s... |
| CVE-2021-33005 | HIGH | 7.5 | 1.4% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now