2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33493 | MEDIUM | 6 | 0.5% | Nov 22, 2021 | The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format. |
| CVE-2021-33492 | MEDIUM | 6.1 | 1.1% | Nov 22, 2021 | OX App Suite 7.10.5 allows XSS via an OX Chat room name. |
| CVE-2021-33491 | MEDIUM | 6.5 | 2.4% | Nov 22, 2021 | OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandlin... |
| CVE-2021-33490 | MEDIUM | 6.1 | 1.3% | Nov 22, 2021 | OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature. |
| CVE-2021-33489 | MEDIUM | 6.1 | 1.3% | Nov 22, 2021 | OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file. |
| CVE-2021-33488 | MEDIUM | 6.1 | 1.1% | Nov 22, 2021 | chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a deve... |
| CVE-2021-34400 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-34399 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-23219 | MEDIUM | 4.1 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with eleva... |
| CVE-2021-1125 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-1105 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-1088 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-36340 | MEDIUM | 5.5 | 0.2% | Nov 20, 2021 | Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user ma... |
| CVE-2021-36322 | MEDIUM | 6.1 | 0.8% | Nov 20, 2021 | Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unau... |
| CVE-2021-36310 | MEDIUM | 4.9 | 0.8% | Nov 20, 2021 | Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption fla... |
| CVE-2021-38681 | MEDIUM | 5.4 | 0.7% | Nov 20, 2021 | A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exp... |
| CVE-2021-39198 | MEDIUM | 5.4 | 0.3% | Nov 19, 2021 | OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a v... |
| CVE-2021-42744 | MEDIUM | 5.5 | 0.3% | Nov 19, 2021 | Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource fr... |
| CVE-2021-36884 | MEDIUM | 5.4 | 0.6% | Nov 19, 2021 | Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1... |
| CVE-2021-26262 | MEDIUM | 5.5 | 0.6% | Nov 19, 2021 | Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource fr... |
| CVE-2021-26248 | MEDIUM | 5.5 | 0.2% | Nov 19, 2021 | Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource fr... |
| CVE-2021-22969 | MEDIUM | 5.3 | 0.8% | Nov 19, 2021 | Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an at... |
| CVE-2021-29323 | MEDIUM | 5.5 | 0.6% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp... |
| CVE-2021-22030 | MEDIUM | 6.5 | 1.0% | Nov 19, 2021 | In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensit... |
| CVE-2021-43409 | MEDIUM | 6.1 | 0.9% | Nov 19, 2021 | The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cro... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now