2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39352 | HIGH | 7.2 | 56.6% | Oct 21, 2021 | The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found... |
| CVE-2021-39321 | HIGH | 8.8 | 2.0% | Oct 21, 2021 | Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_... |
| CVE-2021-22034 | HIGH | 7.5 | 1.0% | Oct 21, 2021 | Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability. |
| CVE-2021-42716 | HIGH | 7.1 | 1.4% | Oct 21, 2021 | An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when c... |
| CVE-2021-41160 | HIGH | 8.8 | 1.6% | Oct 21, 2021 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected ve... |
| CVE-2021-41159 | HIGH | 8.8 | 1.3% | Oct 21, 2021 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP cl... |
| CVE-2021-41146 | HIGH | 8.8 | 1.4% | Oct 21, 2021 | qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows... |
| CVE-2021-35227 | HIGH | 7.8 | 0.5% | Oct 21, 2021 | The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available. |
| CVE-2021-29873 | HIGH | 8.1 | 1.5% | Oct 21, 2021 | IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service... |
| CVE-2021-20120 | HIGH | 8.8 | 0.5% | Oct 21, 2021 | The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery... |
| CVE-2021-41790 | HIGH | 8.8 | 1.4% | Oct 21, 2021 | An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows... |
| CVE-2021-42108 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free B... |
| CVE-2021-42107 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 ... |
| CVE-2021-42106 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 ... |
| CVE-2021-42105 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 ... |
| CVE-2021-42104 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 ... |
| CVE-2021-42103 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a loca... |
| CVE-2021-42102 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow... |
| CVE-2021-42101 | HIGH | 7.8 | 0.4% | Oct 21, 2021 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a loca... |
| CVE-2021-42012 | HIGH | 7.8 | 0.6% | Oct 21, 2021 | A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Secur... |
| CVE-2021-42011 | HIGH | 7.8 | 0.3% | Oct 21, 2021 | An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local a... |
| CVE-2021-23139 | HIGH | 7.5 | 1.1% | Oct 21, 2021 | A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker t... |
| CVE-2021-40122 | HIGH | 7.5 | 1.1% | Oct 21, 2021 | A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote atta... |
| CVE-2021-34743 | HIGH | 7.1 | 0.4% | Oct 21, 2021 | A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote at... |
| CVE-2021-34736 | HIGH | 7.5 | 1.2% | Oct 21, 2021 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now