2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43462 | MEDIUM | 5.4 | 0.6% | Apr 4, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter. |
| CVE-2021-43461 | MEDIUM | 5.4 | 0.6% | Apr 4, 2022 | Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter. |
| CVE-2021-43460 | HIGH | 7.8 | 0.4% | Apr 4, 2022 | An Unquoted Service Path vulnerability exists in System Explorer 7.0.0 via via a specially crafted file in the SystemExp... |
| CVE-2021-43459 | MEDIUM | 5.4 | 0.6% | Apr 4, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) path parame... |
| CVE-2021-25113 | MEDIUM | 5.4 | 0.6% | Apr 4, 2022 | The Dropdown Menu Widget WordPress plugin through 1.9.7 does not have authorisation and CSRF checks when saving its sett... |
| CVE-2021-25048 | MEDIUM | 5.4 | 0.6% | Apr 4, 2022 | The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creatin... |
| CVE-2021-43458 | HIGH | 7.8 | 0.4% | Apr 4, 2022 | An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsflowd, (2) V... |
| CVE-2021-43457 | HIGH | 7.8 | 0.3% | Apr 4, 2022 | An Unquoted Service Path vulnerability exists in bVPN 2.5.1 via a specially crafted file in the waselvpnserv service pat... |
| CVE-2021-43456 | HIGH | 7.8 | 0.4% | Apr 4, 2022 | An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the R... |
| CVE-2021-43455 | HIGH | 7.8 | 0.4% | Apr 4, 2022 | An Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a specially crafted file in the FreeLAN Service path. |
| CVE-2021-43454 | HIGH | 7.8 | 0.4% | Apr 4, 2022 | An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted file in the ATService p... |
| CVE-2021-44138 | HIGH | 7.5 | 14.1% | Apr 4, 2022 | There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remo... |
| CVE-2021-36776 | HIGH | 8.8 | 1.1% | Apr 4, 2022 | A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users. This issue ... |
| CVE-2021-36775 | HIGH | 8.8 | 0.9% | Apr 4, 2022 | a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. T... |
| CVE-2021-33616 | MEDIUM | 5.4 | 0.7% | Apr 4, 2022 | RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS. |
| CVE-2021-30066 | MEDIUM | 6.8 | 0.2% | Apr 3, 2022 | On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon ... |
| CVE-2021-30065 | HIGH | 7.5 | 0.8% | Apr 3, 2022 | On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon ... |
| CVE-2021-30064 | CRITICAL | 9.8 | 0.9% | Apr 3, 2022 | On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon ... |
| CVE-2021-30063 | HIGH | 7.5 | 1.0% | Apr 3, 2022 | On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafte... |
| CVE-2021-30062 | HIGH | 7.5 | 0.8% | Apr 3, 2022 | On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafte... |
| CVE-2021-30061 | MEDIUM | 6.8 | 0.4% | Apr 3, 2022 | On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon ... |
| CVE-2021-3847 | HIGH | 7.8 | 0.5% | Apr 1, 2022 | An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsyste... |
| CVE-2021-3461 | HIGH | 7.1 | 0.3% | Apr 1, 2022 | A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SA... |
| CVE-2021-39908 | HIGH | 7.5 | 1.2% | Apr 1, 2022 | In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and al... |
| CVE-2021-33657 | HIGH | 8.8 | 2.0% | Apr 1, 2022 | There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By craf... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now