2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42297 | MEDIUM | 5 | 1.5% | Nov 24, 2021 | Windows 10 Update Assistant Elevation of Privilege Vulnerability |
| CVE-2021-38004 | MEDIUM | 4.3 | 0.8% | Nov 23, 2021 | Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cro... |
| CVE-2021-38000 | MEDIUM | 6.1 | 4.5% | Nov 23, 2021 | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote... |
| CVE-2021-37999 | MEDIUM | 6.1 | 0.9% | Nov 23, 2021 | Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject ... |
| CVE-2021-38980 | MEDIUM | 5.3 | 1.2% | Nov 23, 2021 | IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a re... |
| CVE-2021-38875 | MEDIUM | 6.5 | 1.0% | Nov 23, 2021 | IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error... |
| CVE-2021-36334 | MEDIUM | 6.8 | 0.7% | Nov 23, 2021 | Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A remote high privileged at... |
| CVE-2021-36333 | MEDIUM | 5.5 | 0.2% | Nov 23, 2021 | Dell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. A local low privileged attacker, ... |
| CVE-2021-36332 | MEDIUM | 5.4 | 0.6% | Nov 23, 2021 | Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privil... |
| CVE-2021-31852 | MEDIUM | 6.1 | 0.8% | Nov 23, 2021 | A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated a... |
| CVE-2021-31851 | MEDIUM | 6.1 | 0.8% | Nov 23, 2021 | A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated a... |
| CVE-2021-25986 | MEDIUM | 5.4 | 0.6% | Nov 23, 2021 | In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. A... |
| CVE-2021-24894 | MEDIUM | 6.5 | 1.4% | Nov 23, 2021 | The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long inte... |
| CVE-2021-24891 | MEDIUM | 6.1 | 24.0% | Nov 23, 2021 | The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM v... |
| CVE-2021-24888 | MEDIUM | 4.8 | 0.7% | Nov 23, 2021 | The ImageBoss WordPress plugin before 3.0.6 does not sanitise and escape its Source Name setting, which could allow high... |
| CVE-2021-24882 | MEDIUM | 4.8 | 0.6% | Nov 23, 2021 | The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and G... |
| CVE-2021-24875 | MEDIUM | 6.1 | 1.6% | Nov 23, 2021 | The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter... |
| CVE-2021-24873 | MEDIUM | 6.1 | 0.8% | Nov 23, 2021 | The Tutor LMS WordPress plugin before 1.9.11 does not sanitise and escape user input before outputting back in attribute... |
| CVE-2021-24830 | MEDIUM | 4.8 | 0.7% | Nov 23, 2021 | The Advanced Access Manager WordPress plugin before 6.8.0 does not escape some of its settings when outputting them, all... |
| CVE-2021-24812 | MEDIUM | 5.4 | 0.6% | Nov 23, 2021 | The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lea... |
| CVE-2021-24729 | MEDIUM | 5.4 | 0.6% | Nov 23, 2021 | The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow... |
| CVE-2021-24713 | MEDIUM | 4.8 | 0.6% | Nov 23, 2021 | The Video Lessons Manager WordPress plugin before 1.7.2 and Video Lessons Manager Pro WordPress plugin before 3.5.9 do n... |
| CVE-2021-24703 | MEDIUM | 5.7 | 0.4% | Nov 23, 2021 | The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate ... |
| CVE-2021-24700 | MEDIUM | 4.8 | 0.6% | Nov 23, 2021 | The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high... |
| CVE-2021-24668 | MEDIUM | 4.3 | 0.4% | Nov 23, 2021 | The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrator... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now