2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3722 | MEDIUM | 5 | 0.2% | Apr 22, 2022 | A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configu... |
| CVE-2021-3721 | MEDIUM | 5.5 | 0.2% | Apr 22, 2022 | A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an att... |
| CVE-2021-38946 | MEDIUM | 5.4 | 0.6% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users t... |
| CVE-2021-38905 | MEDIUM | 4.3 | 0.9% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should ... |
| CVE-2021-38904 | MEDIUM | 6.5 | 1.7% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browse... |
| CVE-2021-38903 | MEDIUM | 5.4 | 0.9% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of ... |
| CVE-2021-38886 | HIGH | 8.8 | 0.5% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an attacke... |
| CVE-2021-29824 | MEDIUM | 4.3 | 0.8% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could ha... |
| CVE-2021-20464 | MEDIUM | 6.5 | 1.3% | Apr 22, 2022 | IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb atta... |
| CVE-2021-36203 | CRITICAL | 9.1 | 0.8% | Apr 22, 2022 | The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially craf... |
| CVE-2021-32929 | HIGH | 8.8 | 0.4% | Apr 22, 2022 | All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user. |
| CVE-2021-32927 | MEDIUM | 6.1 | 0.6% | Apr 22, 2022 | An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS T... |
| CVE-2021-43708 | MEDIUM | 5.5 | 0.3% | Apr 21, 2022 | The Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the generation of a classification l... |
| CVE-2021-35229 | MEDIUM | 6.1 | 3.0% | Apr 21, 2022 | Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when usi... |
| CVE-2021-23055 | MEDIUM | 6.5 | 0.7% | Apr 21, 2022 | On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ing... |
| CVE-2021-41162 | MEDIUM | 6.1 | 0.6% | Apr 21, 2022 | Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to beta6 the `ajax.render.php?opera... |
| CVE-2021-41161 | MEDIUM | 6.1 | 0.6% | Apr 21, 2022 | Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don't prope... |
| CVE-2021-43481 | CRITICAL | 9.8 | 5.5% | Apr 20, 2022 | An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstag... |
| CVE-2021-37740 | HIGH | 7.5 | 4.6% | Apr 20, 2022 | A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP inter... |
| CVE-2021-43990 | MEDIUM | 5.3 | 0.6% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload... |
| CVE-2021-43988 | MEDIUM | 5.9 | 0.8% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of fi... |
| CVE-2021-43986 | HIGH | 7 | 0.2% | Apr 20, 2022 | The setup program for the affected product configures its files and folders with full access, which may allow unauthoriz... |
| CVE-2021-43933 | MEDIUM | 5.9 | 0.6% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receivin... |
| CVE-2021-38483 | MEDIUM | 5.7 | 0.2% | Apr 20, 2022 | The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileg... |
| CVE-2021-3101 | HIGH | 8.8 | 0.4% | Apr 19, 2022 | Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now