2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37221 | HIGH | 8.8 | 1.1% | Oct 27, 2021 | A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update ... |
| CVE-2021-22101 | HIGH | 7.5 | 1.0% | Oct 27, 2021 | Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowi... |
| CVE-2021-41619 | HIGH | 7.2 | 2.6% | Oct 27, 2021 | An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code execution via the applicati... |
| CVE-2021-41872 | HIGH | 7.5 | 1.2% | Oct 27, 2021 | Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by at... |
| CVE-2021-34580 | HIGH | 7.5 | 1.0% | Oct 27, 2021 | In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind o... |
| CVE-2021-38450 | HIGH | 8.8 | 1.0% | Oct 27, 2021 | The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft... |
| CVE-2021-37130 | HIGH | 7.5 | 0.8% | Oct 27, 2021 | There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses ex... |
| CVE-2021-37129 | HIGH | 7.5 | 0.7% | Oct 27, 2021 | There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a mo... |
| CVE-2021-37127 | HIGH | 7.2 | 0.7% | Oct 27, 2021 | There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the si... |
| CVE-2021-26610 | HIGH | 8.8 | 0.4% | Oct 27, 2021 | The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upl... |
| CVE-2021-23877 | HIGH | 7.8 | 0.4% | Oct 26, 2021 | Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection (MTP) prior to 16.0.34_x ma... |
| CVE-2021-41158 | HIGH | 7.5 | 0.8% | Oct 26, 2021 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to ... |
| CVE-2021-37364 | HIGH | 7.8 | 1.3% | Oct 26, 2021 | OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify perm... |
| CVE-2021-37363 | HIGH | 7.8 | 1.6% | Oct 26, 2021 | An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.e... |
| CVE-2021-41078 | HIGH | 7.8 | 1.5% | Oct 26, 2021 | Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file. |
| CVE-2021-37372 | HIGH | 8.8 | 3.3% | Oct 26, 2021 | Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can uplo... |
| CVE-2021-26609 | HIGH | 7.5 | 1.7% | Oct 26, 2021 | A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type paramete... |
| CVE-2021-40345 | HIGH | 7.2 | 23.0% | Oct 26, 2021 | An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can uplo... |
| CVE-2021-40344 | HIGH | 7.2 | 66.2% | Oct 26, 2021 | An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can uplo... |
| CVE-2021-40343 | HIGH | 7.8 | 0.7% | Oct 26, 2021 | An issue was discovered in Nagios XI 5.8.5. Insecure file permissions on the nagios_unbundler.py file allow the nagios u... |
| CVE-2021-34595 | HIGH | 8.1 | 0.9% | Oct 26, 2021 | A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 ... |
| CVE-2021-34593 | HIGH | 7.5 | 2.6% | Oct 26, 2021 | In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid reque... |
| CVE-2021-34586 | HIGH | 7.5 | 13.1% | Oct 26, 2021 | In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the ... |
| CVE-2021-34585 | HIGH | 7.5 | 0.9% | Oct 26, 2021 | In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser... |
| CVE-2021-34583 | HIGH | 7.5 | 8.4% | Oct 26, 2021 | Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service cond... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now