2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43203 | HIGH | 7.5 | 0.8% | Nov 9, 2021 | In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly. |
| CVE-2021-43196 | HIGH | 7.5 | 1.0% | Nov 9, 2021 | In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible. |
| CVE-2021-43189 | HIGH | 7.3 | 0.7% | Nov 9, 2021 | In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete. |
| CVE-2021-43188 | HIGH | 7.3 | 0.7% | Nov 9, 2021 | In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete. |
| CVE-2021-43114 | HIGH | 7.5 | 1.1% | Nov 9, 2021 | FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR... |
| CVE-2021-42021 | HIGH | 7.5 | 1.7% | Nov 9, 2021 | A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2),... |
| CVE-2021-40366 | HIGH | 7.4 | 0.4% | Nov 9, 2021 | A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM module... |
| CVE-2021-40359 | HIGH | 7.7 | 1.1% | Nov 9, 2021 | A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS... |
| CVE-2021-37207 | HIGH | 7.8 | 0.2% | Nov 9, 2021 | A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns improper... |
| CVE-2021-31888 | HIGH | 8.8 | 2.4% | Nov 9, 2021 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver... |
| CVE-2021-31887 | HIGH | 8.8 | 2.4% | Nov 9, 2021 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver... |
| CVE-2021-31885 | HIGH | 7.5 | 1.2% | Nov 9, 2021 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver... |
| CVE-2021-31883 | HIGH | 7.5 | 1.5% | Nov 9, 2021 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R... |
| CVE-2021-31882 | HIGH | 7.5 | 1.5% | Nov 9, 2021 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R... |
| CVE-2021-31881 | HIGH | 7.5 | 1.5% | Nov 9, 2021 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R... |
| CVE-2021-41253 | HIGH | 8.1 | 1.8% | Nov 8, 2021 | Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions prov... |
| CVE-2021-24844 | HIGH | 7.2 | 1.5% | Nov 8, 2021 | The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL s... |
| CVE-2021-24835 | HIGH | 8.8 | 1.3% | Nov 8, 2021 | The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible WordPress plugin before... |
| CVE-2021-24829 | HIGH | 8.8 | 1.3% | Nov 8, 2021 | The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to t... |
| CVE-2021-24791 | HIGH | 7.2 | 5.0% | Nov 8, 2021 | The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" req... |
| CVE-2021-24695 | HIGH | 7.5 | 1.6% | Nov 8, 2021 | The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any au... |
| CVE-2021-24669 | HIGH | 8.8 | 1.3% | Nov 8, 2021 | The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter... |
| CVE-2021-24647 | HIGH | 8.1 | 8.4% | Nov 8, 2021 | The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPres... |
| CVE-2021-24631 | HIGH | 8.8 | 1.5% | Nov 8, 2021 | The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in... |
| CVE-2021-24630 | HIGH | 8.8 | 1.5% | Nov 8, 2021 | The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now