2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39902 | MEDIUM | 4.3 | 0.8% | Nov 4, 2021 | Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the sev... |
| CVE-2021-43398 | MEDIUM | 5.3 | 1.9% | Nov 4, 2021 | Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation bet... |
| CVE-2021-41248 | MEDIUM | 4.7 | 1.0% | Nov 4, 2021 | GraphiQL is the reference implementation of this monorepo, GraphQL IDE, an official project under the GraphQL Foundation... |
| CVE-2021-41249 | MEDIUM | 4.7 | 1.2% | Nov 4, 2021 | GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-... |
| CVE-2021-43389 | MEDIUM | 5.5 | 0.7% | Nov 4, 2021 | An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_cap... |
| CVE-2021-43293 | MEDIUM | 4.3 | 0.8% | Nov 4, 2021 | Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform networ... |
| CVE-2021-40128 | MEDIUM | 5.3 | 1.0% | Nov 4, 2021 | A vulnerability in the account activation feature of Cisco Webex Meetings could allow an unauthenticated, remote attacke... |
| CVE-2021-40127 | MEDIUM | 5.3 | 1.2% | Nov 4, 2021 | A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Bus... |
| CVE-2021-40126 | MEDIUM | 4.3 | 0.8% | Nov 4, 2021 | A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an... |
| CVE-2021-40115 | MEDIUM | 6.1 | 0.8% | Nov 4, 2021 | A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site script... |
| CVE-2021-34784 | MEDIUM | 5.4 | 0.6% | Nov 4, 2021 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable ... |
| CVE-2021-34774 | MEDIUM | 4.9 | 1.0% | Nov 4, 2021 | A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an ... |
| CVE-2021-34773 | MEDIUM | 6.5 | 0.5% | Nov 4, 2021 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie... |
| CVE-2021-34731 | MEDIUM | 4.8 | 0.6% | Nov 4, 2021 | A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remo... |
| CVE-2021-34701 | MEDIUM | 4.3 | 1.5% | Nov 4, 2021 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie... |
| CVE-2021-1500 | MEDIUM | 6.1 | 0.8% | Nov 4, 2021 | A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote a... |
| CVE-2021-34594 | MEDIUM | 6.5 | 1.1% | Nov 4, 2021 | TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.... |
| CVE-2021-41562 | MEDIUM | 6.1 | 0.2% | Nov 3, 2021 | A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue ... |
| CVE-2021-43032 | MEDIUM | 4.8 | 0.9% | Nov 3, 2021 | In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertisement via the Advertisi... |
| CVE-2021-38488 | MEDIUM | 4.8 | 12.3% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta... |
| CVE-2021-38428 | MEDIUM | 4.8 | 11.4% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta... |
| CVE-2021-38418 | MEDIUM | 5.9 | 0.5% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior runs by default on HTTP, which may allow an attacker to be position... |
| CVE-2021-38411 | MEDIUM | 4.8 | 0.6% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta... |
| CVE-2021-38407 | MEDIUM | 4.8 | 0.6% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta... |
| CVE-2021-38403 | MEDIUM | 4.8 | 0.6% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now