2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3100 | HIGH | 8.8 | 0.4% | Apr 19, 2022 | The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM be... |
| CVE-2021-4096 | HIGH | 8.8 | 0.6% | Apr 19, 2022 | The Fancy Product Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery via the FPD_Admin_Import cla... |
| CVE-2021-26627 | HIGH | 7.5 | 1.3% | Apr 19, 2022 | Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerabilit... |
| CVE-2021-26626 | HIGH | 8.8 | 1.2% | Apr 19, 2022 | Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the s... |
| CVE-2021-26625 | HIGH | 8.8 | 0.6% | Apr 19, 2022 | Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platfor... |
| CVE-2021-23283 | MEDIUM | 5.4 | 0.5% | Apr 19, 2022 | Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerab... |
| CVE-2021-39078 | MEDIUM | 4.4 | 0.1% | Apr 19, 2022 | IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM... |
| CVE-2021-39076 | HIGH | 7.5 | 0.5% | Apr 19, 2022 | IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to d... |
| CVE-2021-39072 | MEDIUM | 5.9 | 1.2% | Apr 19, 2022 | IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to prope... |
| CVE-2021-39033 | MEDIUM | 6.5 | 1.0% | Apr 19, 2022 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote at... |
| CVE-2021-44519 | HIGH | 8.8 | 2.6% | Apr 19, 2022 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to re... |
| CVE-2021-43129 | MEDIUM | 6.5 | 1.7% | Apr 19, 2022 | A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a ... |
| CVE-2021-41570 | MEDIUM | 5.4 | 0.4% | Apr 19, 2022 | Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User ... |
| CVE-2021-25120 | MEDIUM | 6.1 | 2.9% | Apr 18, 2022 | The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX ... |
| CVE-2021-42782 | MEDIUM | 5.3 | 2.6% | Apr 18, 2022 | Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash p... |
| CVE-2021-42781 | MEDIUM | 5.3 | 2.7% | Apr 18, 2022 | Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash... |
| CVE-2021-42780 | MEDIUM | 5.3 | 2.0% | Apr 18, 2022 | A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash p... |
| CVE-2021-42779 | MEDIUM | 5.3 | 1.9% | Apr 18, 2022 | A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. |
| CVE-2021-42778 | MEDIUM | 5.3 | 2.0% | Apr 18, 2022 | A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. |
| CVE-2021-3681 | MEDIUM | 5.5 | 0.2% | Apr 18, 2022 | A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directo... |
| CVE-2021-3652 | MEDIUM | 6.5 | 1.3% | Apr 18, 2022 | A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then... |
| CVE-2021-3624 | HIGH | 7.8 | 0.8% | Apr 18, 2022 | There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input ima... |
| CVE-2021-3503 | MEDIUM | 4.3 | 1.0% | Apr 18, 2022 | A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat fro... |
| CVE-2021-23286 | HIGH | 8 | 0.4% | Apr 18, 2022 | Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vuln... |
| CVE-2021-23285 | MEDIUM | 4.8 | 0.4% | Apr 18, 2022 | Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vuln... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now