2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29875 | HIGH | 7.5 | 1.1% | Nov 2, 2021 | IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third p... |
| CVE-2021-29737 | HIGH | 7.5 | 0.7% | Nov 2, 2021 | IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of ... |
| CVE-2021-36925 | HIGH | 7.8 | 0.3% | Nov 2, 2021 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users ... |
| CVE-2021-36924 | HIGH | 7.8 | 0.2% | Nov 2, 2021 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users ... |
| CVE-2021-36923 | HIGH | 7.8 | 0.3% | Nov 2, 2021 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users ... |
| CVE-2021-36922 | HIGH | 7.8 | 0.3% | Nov 2, 2021 | RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users ... |
| CVE-2021-42763 | HIGH | 7.5 | 0.6% | Nov 2, 2021 | Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the ... |
| CVE-2021-37842 | HIGH | 7.5 | 0.6% | Nov 2, 2021 | metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials ca... |
| CVE-2021-3765 | HIGH | 7.5 | 1.7% | Nov 2, 2021 | validator.js is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-41187 | HIGH | 8.8 | 0.8% | Nov 1, 2021 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection s... |
| CVE-2021-39341 | HIGH | 8.2 | 23.3% | Nov 1, 2021 | The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due... |
| CVE-2021-39333 | HIGH | 8.1 | 1.0% | Nov 1, 2021 | The Hashthemes Demo Importer Plugin <= 1.1.1 for WordPress contained several AJAX functions which relied on a nonce whic... |
| CVE-2021-31849 | HIGH | 7.2 | 1.0% | Nov 1, 2021 | SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacke... |
| CVE-2021-38847 | HIGH | 8.8 | 1.3% | Nov 1, 2021 | S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Adm... |
| CVE-2021-3704 | HIGH | 7.5 | 1.4% | Nov 1, 2021 | Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of ... |
| CVE-2021-3440 | HIGH | 7.8 | 0.3% | Nov 1, 2021 | HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevati... |
| CVE-2021-27005 | HIGH | 7.5 | 1.2% | Nov 1, 2021 | Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerabili... |
| CVE-2021-42557 | HIGH | 7.5 | 2.2% | Nov 1, 2021 | In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials. |
| CVE-2021-25877 | HIGH | 7.2 | 3.1% | Nov 1, 2021 | AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write f... |
| CVE-2021-25874 | HIGH | 7.5 | 1.9% | Nov 1, 2021 | AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter... |
| CVE-2021-27644 | HIGH | 8.8 | 1.9% | Nov 1, 2021 | In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Onl... |
| CVE-2021-24809 | HIGH | 8.8 | 0.7% | Nov 1, 2021 | The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_bett... |
| CVE-2021-24717 | HIGH | 8.8 | 1.3% | Nov 1, 2021 | The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber role... |
| CVE-2021-40348 | HIGH | 8.8 | 1.7% | Nov 1, 2021 | Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize t... |
| CVE-2021-42694 | HIGH | 8.3 | 4.5% | Nov 1, 2021 | An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now