2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24629 | HIGH | 7.2 | 1.5% | Nov 8, 2021 | The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before usi... |
| CVE-2021-24628 | HIGH | 7.2 | 1.5% | Nov 8, 2021 | The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL ... |
| CVE-2021-24627 | HIGH | 7.2 | 6.6% | Nov 8, 2021 | The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in... |
| CVE-2021-24626 | HIGH | 8.8 | 0.7% | Nov 8, 2021 | The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allow... |
| CVE-2021-24625 | HIGH | 7.2 | 1.5% | Nov 8, 2021 | The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from... |
| CVE-2021-24575 | HIGH | 8.8 | 1.3% | Nov 8, 2021 | The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared s... |
| CVE-2021-24537 | HIGH | 7.2 | 1.5% | Nov 8, 2021 | The Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened... |
| CVE-2021-39182 | HIGH | 7.5 | 0.5% | Nov 8, 2021 | EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorith... |
| CVE-2021-28022 | HIGH | 7.5 | 1.1% | Nov 8, 2021 | Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate inform... |
| CVE-2021-41772 | HIGH | 7.5 | 3.1% | Nov 8, 2021 | Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing ... |
| CVE-2021-41771 | HIGH | 7.5 | 4.4% | Nov 8, 2021 | ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Loc... |
| CVE-2021-42372 | HIGH | 8.8 | 6.1% | Nov 8, 2021 | A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticate... |
| CVE-2021-42370 | HIGH | 7.5 | 0.7% | Nov 8, 2021 | A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is pr... |
| CVE-2021-42076 | HIGH | 7.5 | 1.5% | Nov 8, 2021 | An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka ... |
| CVE-2021-42075 | HIGH | 7.5 | 2.1% | Nov 8, 2021 | An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) ... |
| CVE-2021-42074 | HIGH | 7.5 | 1.7% | Nov 8, 2021 | An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barri... |
| CVE-2021-42073 | HIGH | 8.2 | 1.4% | Nov 8, 2021 | An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers compone... |
| CVE-2021-42072 | HIGH | 8.8 | 1.6% | Nov 8, 2021 | An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) ... |
| CVE-2021-34685 | HIGH | 7.2 | 2.2% | Nov 8, 2021 | UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, wh... |
| CVE-2021-31602 | HIGH | 7.5 | 51.7% | Nov 8, 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The... |
| CVE-2021-31599 | HIGH | 8.8 | 2.3% | Nov 8, 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A r... |
| CVE-2021-43414 | HIGH | 7 | 0.3% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is v... |
| CVE-2021-43413 | HIGH | 8.8 | 1.9% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file... |
| CVE-2021-43412 | HIGH | 7.8 | 0.3% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification messages from any client o... |
| CVE-2021-43411 | HIGH | 7.5 | 1.2% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now