2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34602 | HIGH | 8.8 | 1.3% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticate... |
| CVE-2021-34601 | CRITICAL | 9.8 | 1.0% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC61... |
| CVE-2021-34592 | HIGH | 8.8 | 1.3% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticate... |
| CVE-2021-34591 | HIGH | 7.8 | 0.2% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacke... |
| CVE-2021-34590 | MEDIUM | 5.4 | 0.4% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker coul... |
| CVE-2021-34589 | HIGH | 7.5 | 0.9% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can ... |
| CVE-2021-34588 | HIGH | 8.6 | 0.8% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected ... |
| CVE-2021-34587 | MEDIUM | 5.3 | 0.9% | Apr 27, 2022 | In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as inpu... |
| CVE-2021-29776 | MEDIUM | 4.3 | 0.6% | Apr 27, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's ... |
| CVE-2021-46424 | CRITICAL | 9.1 | 36.8% | Apr 27, 2022 | Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to de... |
| CVE-2021-46423 | MEDIUM | 5.3 | 1.5% | Apr 27, 2022 | Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker... |
| CVE-2021-46422 | CRITICAL | 9.8 | 94.8% | Apr 27, 2022 | Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute... |
| CVE-2021-46442 | CRITICAL | 9.8 | 54.6% | Apr 27, 2022 | In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", a... |
| CVE-2021-46441 | HIGH | 8.8 | 31.8% | Apr 27, 2022 | In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" para... |
| CVE-2021-46421 | HIGH | 7.5 | 5.7% | Apr 27, 2022 | Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, w... |
| CVE-2021-46420 | HIGH | 7.5 | 5.5% | Apr 27, 2022 | Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability,... |
| CVE-2021-41041 | MEDIUM | 5.3 | 1.0% | Apr 27, 2022 | In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification w... |
| CVE-2021-36895 | MEDIUM | 6.1 | 0.7% | Apr 26, 2022 | Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG ima... |
| CVE-2021-36867 | MEDIUM | 5.4 | 0.5% | Apr 26, 2022 | Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19... |
| CVE-2021-26629 | HIGH | 8.8 | 1.5% | Apr 26, 2022 | A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .... |
| CVE-2021-26628 | MEDIUM | 6.1 | 0.7% | Apr 26, 2022 | Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges.... |
| CVE-2021-35250 | HIGH | 7.5 | 14.4% | Apr 25, 2022 | A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to t... |
| CVE-2021-4225 | HIGH | 8.8 | 1.7% | Apr 25, 2022 | The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to u... |
| CVE-2021-46782 | MEDIUM | 6.1 | 0.8% | Apr 25, 2022 | The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back... |
| CVE-2021-46781 | MEDIUM | 6.1 | 0.8% | Apr 25, 2022 | The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputt... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now