2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42337 | MEDIUM | 4.3 | 0.9% | Nov 16, 2021 | The permission control of AIFU cashier management salary query function can be bypassed, thus after obtaining general us... |
| CVE-2021-41271 | MEDIUM | 5.3 | 0.9% | Nov 15, 2021 | Discourse is a platform for community discussion. In affected versions a maliciously crafted request could cause an erro... |
| CVE-2021-42376 | MEDIUM | 5.5 | 0.4% | Nov 15, 2021 | A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, ... |
| CVE-2021-42375 | MEDIUM | 5.5 | 0.4% | Nov 15, 2021 | An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted ... |
| CVE-2021-42374 | MEDIUM | 5.3 | 0.6% | Nov 15, 2021 | An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-... |
| CVE-2021-42373 | MEDIUM | 5.5 | 0.4% | Nov 15, 2021 | A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no pag... |
| CVE-2021-39222 | MEDIUM | 6.1 | 1.1% | Nov 15, 2021 | Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Talk application was vulnerable to a store... |
| CVE-2021-41951 | MEDIUM | 6.1 | 77.9% | Nov 15, 2021 | ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_ss... |
| CVE-2021-38982 | MEDIUM | 5.4 | 0.5% | Nov 15, 2021 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allo... |
| CVE-2021-38981 | MEDIUM | 5.3 | 1.3% | Nov 15, 2021 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information ... |
| CVE-2021-38978 | MEDIUM | 5.9 | 0.9% | Nov 15, 2021 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information,... |
| CVE-2021-38977 | MEDIUM | 4.3 | 0.5% | Nov 15, 2021 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or s... |
| CVE-2021-38976 | MEDIUM | 5.5 | 0.2% | Nov 15, 2021 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read ... |
| CVE-2021-38975 | MEDIUM | 6.5 | 0.9% | Nov 15, 2021 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive infor... |
| CVE-2021-38974 | MEDIUM | 6.5 | 1.0% | Nov 15, 2021 | IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service... |
| CVE-2021-43574 | MEDIUM | 6.1 | 2.4% | Nov 15, 2021 | WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default U... |
| CVE-2021-42703 | MEDIUM | 6.1 | 0.6% | Nov 15, 2021 | This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie... |
| CVE-2021-22959 | MEDIUM | 6.5 | 2.9% | Nov 15, 2021 | The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Req... |
| CVE-2021-42838 | MEDIUM | 6.1 | 0.6% | Nov 15, 2021 | Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thu... |
| CVE-2021-41289 | MEDIUM | 6.3 | 0.2% | Nov 15, 2021 | ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a g... |
| CVE-2021-3915 | MEDIUM | 5.7 | 0.9% | Nov 13, 2021 | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type |
| CVE-2021-3776 | MEDIUM | 5.4 | 0.4% | Nov 13, 2021 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3775 | MEDIUM | 5.4 | 0.4% | Nov 13, 2021 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3683 | MEDIUM | 6.5 | 0.4% | Nov 13, 2021 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3945 | MEDIUM | 6.1 | 1.0% | Nov 13, 2021 | django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now