2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46780 | MEDIUM | 6.1 | 0.8% | Apr 25, 2022 | The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an at... |
| CVE-2021-39040 | HIGH | 8 | 0.7% | Apr 25, 2022 | IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or si... |
| CVE-2021-25111 | MEDIUM | 6.1 | 1.9% | Apr 25, 2022 | The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before ... |
| CVE-2021-25094 | HIGH | 8.1 | 83.5% | Apr 25, 2022 | The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rog... |
| CVE-2021-24957 | HIGH | 8.8 | 1.3% | Apr 25, 2022 | The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a S... |
| CVE-2021-24805 | MEDIUM | 4.3 | 0.4% | Apr 25, 2022 | The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, a... |
| CVE-2021-24800 | MEDIUM | 4.3 | 0.6% | Apr 25, 2022 | The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user ... |
| CVE-2021-36460 | HIGH | 7.8 | 0.4% | Apr 25, 2022 | VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authen... |
| CVE-2021-45842 | HIGH | 7.5 | 2.3% | Apr 25, 2022 | It is possible to obtain the first administrator's hash set up in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-210714151... |
| CVE-2021-45841 | HIGH | 8.1 | 8.1% | Apr 25, 2022 | In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517), an attacker can self-sign session cookies by knowing the ta... |
| CVE-2021-45840 | CRITICAL | 9.8 | 3.9% | Apr 25, 2022 | It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by send... |
| CVE-2021-45839 | MEDIUM | 6.5 | 9.4% | Apr 25, 2022 | It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X (4.... |
| CVE-2021-45837 | CRITICAL | 9.8 | 15.9% | Apr 25, 2022 | It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by send... |
| CVE-2021-45836 | HIGH | 8.8 | 2.4% | Apr 25, 2022 | An authenticated attacker can execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141... |
| CVE-2021-36628 | — | — | — | Apr 25, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-40680. Reason: This candidate is a reservation d... |
| CVE-2021-40680 | HIGH | 8.1 | 1.3% | Apr 25, 2022 | There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30... |
| CVE-2021-4212 | MEDIUM | 6.7 | 0.2% | Apr 22, 2022 | A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook model... |
| CVE-2021-4211 | MEDIUM | 6.7 | 0.2% | Apr 22, 2022 | A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, Think... |
| CVE-2021-4210 | MEDIUM | 6.7 | 0.2% | Apr 22, 2022 | A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and... |
| CVE-2021-3972 | MEDIUM | 6.7 | 3.0% | Apr 22, 2022 | A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS t... |
| CVE-2021-3971 | MEDIUM | 6.7 | 1.3% | Apr 22, 2022 | A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices... |
| CVE-2021-3970 | MEDIUM | 6.7 | 1.3% | Apr 22, 2022 | A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BI... |
| CVE-2021-3898 | MEDIUM | 6.5 | 0.4% | Apr 22, 2022 | Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify ... |
| CVE-2021-3897 | CRITICAL | 9.8 | 1.2% | Apr 22, 2022 | An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) ... |
| CVE-2021-3849 | CRITICAL | 9.8 | 1.2% | Apr 22, 2022 | An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) an... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now