2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36846 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Premio Chaty (WordPress plu... |
| CVE-2021-22055 | MEDIUM | 5.3 | 0.9% | Apr 11, 2022 | The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attacke... |
| CVE-2021-43442 | HIGH | 8.1 | 0.9% | Apr 11, 2022 | A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 (Ax46), V5.0.9 build 15110... |
| CVE-2021-39068 | MEDIUM | 5.4 | 0.5% | Apr 11, 2022 | IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows us... |
| CVE-2021-38930 | HIGH | 7.5 | 1.4% | Apr 11, 2022 | IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remo... |
| CVE-2021-38929 | HIGH | 7.5 | 1.4% | Apr 11, 2022 | IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remo... |
| CVE-2021-37293 | MEDIUM | 6.5 | 1.4% | Apr 11, 2022 | A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page... |
| CVE-2021-37292 | HIGH | 7.2 | 6.7% | Apr 11, 2022 | An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocu... |
| CVE-2021-37291 | CRITICAL | 9.8 | 8.1% | Apr 11, 2022 | An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id... |
| CVE-2021-40219 | HIGH | 8.8 | 3.3% | Apr 11, 2022 | Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit ... |
| CVE-2021-34250 | — | — | — | Apr 11, 2022 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2021-33396. Reason: This record is a duplicate of CVE-2021-... |
| CVE-2021-25090 | MEDIUM | 5.4 | 0.6% | Apr 11, 2022 | The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in vari... |
| CVE-2021-24987 | MEDIUM | 6.1 | 1.9% | Apr 11, 2022 | The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape t... |
| CVE-2021-24986 | MEDIUM | 6.1 | 0.8% | Apr 11, 2022 | The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attri... |
| CVE-2021-32162 | HIGH | 8.8 | 2.6% | Apr 11, 2022 | A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature. |
| CVE-2021-32161 | MEDIUM | 6.1 | 2.0% | Apr 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature. |
| CVE-2021-32160 | MEDIUM | 6.1 | 2.0% | Apr 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature. |
| CVE-2021-32159 | HIGH | 8.8 | 2.3% | Apr 11, 2022 | A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature. |
| CVE-2021-32158 | MEDIUM | 6.1 | 2.0% | Apr 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature. |
| CVE-2021-32157 | CRITICAL | 9.6 | 4.1% | Apr 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature. |
| CVE-2021-32156 | HIGH | 8.8 | 2.3% | Apr 11, 2022 | A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature. |
| CVE-2021-43149 | — | — | — | Apr 8, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-43009 | MEDIUM | 6.1 | 2.3% | Apr 8, 2022 | A Cross Site Scripting (XSS) vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the reque... |
| CVE-2021-36293 | MEDIUM | 6.7 | 0.2% | Apr 8, 2022 | Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin... |
| CVE-2021-36290 | MEDIUM | 6.7 | 0.2% | Apr 8, 2022 | Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now