2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24834 | MEDIUM | 5.4 | 1.5% | Nov 17, 2021 | The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in th... |
| CVE-2021-24833 | MEDIUM | 5.4 | 1.1% | Nov 17, 2021 | The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in t... |
| CVE-2021-24815 | MEDIUM | 4.8 | 0.6% | Nov 17, 2021 | The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created But... |
| CVE-2021-24802 | MEDIUM | 6.5 | 0.5% | Nov 17, 2021 | The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make... |
| CVE-2021-24796 | MEDIUM | 6.1 | 1.2% | Nov 17, 2021 | The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets be... |
| CVE-2021-24787 | MEDIUM | 4.8 | 0.6% | Nov 17, 2021 | The Client Invoicing by Sprout Invoices WordPress plugin before 19.9.7 does not sanitise and escape some of its settings... |
| CVE-2021-24776 | MEDIUM | 4.3 | 0.4% | Nov 17, 2021 | The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which co... |
| CVE-2021-24598 | MEDIUM | 4.8 | 0.7% | Nov 17, 2021 | The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege u... |
| CVE-2021-43337 | MEDIUM | 6.5 | 1.2% | Nov 17, 2021 | SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_scrip... |
| CVE-2021-26337 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address ... |
| CVE-2021-26336 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result... |
| CVE-2021-26330 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources. |
| CVE-2021-26327 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality. |
| CVE-2021-26325 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of ... |
| CVE-2021-26321 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of s... |
| CVE-2021-26320 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local... |
| CVE-2021-41258 | MEDIUM | 5.4 | 0.8% | Nov 16, 2021 | Kirby is an open source file structured CMS. In affected versions Kirby's blocks field stores structured data for each b... |
| CVE-2021-41252 | MEDIUM | 5.4 | 0.9% | Nov 16, 2021 | Kirby is an open source file structured CMS ### Impact Kirby's writer field stores its formatted content as HTML code. U... |
| CVE-2021-26329 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result ... |
| CVE-2021-26312 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device ... |
| CVE-2021-38949 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local u... |
| CVE-2021-38882 | MEDIUM | 4.4 | 0.2% | Nov 16, 2021 | IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records befo... |
| CVE-2021-25984 | MEDIUM | 6.1 | 0.7% | Nov 16, 2021 | In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site S... |
| CVE-2021-25983 | MEDIUM | 6.1 | 0.7% | Nov 16, 2021 | In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.8 to v1.8.30, are vulnerable to reflected Cross-Sit... |
| CVE-2021-25982 | MEDIUM | 6.1 | 0.7% | Nov 16, 2021 | In Factor (App Framework & Headless CMS) forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now