2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3906 | MEDIUM | 6.5 | 0.6% | Oct 27, 2021 | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type |
| CVE-2021-3904 | MEDIUM | 5.4 | 0.6% | Oct 27, 2021 | grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-25219 | MEDIUM | 5.3 | 8.0% | Oct 27, 2021 | In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Sup... |
| CVE-2021-1117 | MEDIUM | 5.5 | 0.2% | Oct 27, 2021 | Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker th... |
| CVE-2021-1116 | MEDIUM | 5.5 | 0.2% | Oct 27, 2021 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a NULL poi... |
| CVE-2021-1115 | MEDIUM | 6.5 | 0.2% | Oct 27, 2021 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for priva... |
| CVE-2021-40125 | MEDIUM | 6.5 | 1.0% | Oct 27, 2021 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA)... |
| CVE-2021-34794 | MEDIUM | 5.3 | 0.9% | Oct 27, 2021 | A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adapt... |
| CVE-2021-34791 | MEDIUM | 5.3 | 1.1% | Oct 27, 2021 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cis... |
| CVE-2021-34790 | MEDIUM | 5.3 | 1.1% | Oct 27, 2021 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cis... |
| CVE-2021-34787 | MEDIUM | 5.3 | 1.0% | Oct 27, 2021 | A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA)... |
| CVE-2021-34764 | MEDIUM | 6.1 | 0.6% | Oct 27, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2021-34763 | MEDIUM | 4.8 | 0.5% | Oct 27, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2021-34761 | MEDIUM | 6 | 0.2% | Oct 27, 2021 | A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwri... |
| CVE-2021-3900 | MEDIUM | 6.5 | 0.5% | Oct 27, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-37808 | MEDIUM | 5.9 | 1.8% | Oct 27, 2021 | SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcateg... |
| CVE-2021-37806 | MEDIUM | 5.9 | 1.8% | Oct 27, 2021 | An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. ... |
| CVE-2021-37805 | MEDIUM | 5.4 | 0.6% | Oct 27, 2021 | A Stored Cross Site Scripting (XSS) vunerability exists in Sourcecodeste Vehicle Parking Management System affected vers... |
| CVE-2021-29868 | MEDIUM | 5.5 | 0.2% | Oct 27, 2021 | IBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to insufficient session e... |
| CVE-2021-29786 | MEDIUM | 6.5 | 0.5% | Oct 27, 2021 | IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Fo... |
| CVE-2021-29713 | MEDIUM | 5.4 | 0.5% | Oct 27, 2021 | IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary... |
| CVE-2021-29673 | MEDIUM | 5.4 | 0.5% | Oct 27, 2021 | IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary... |
| CVE-2021-20526 | MEDIUM | 5.3 | 1.1% | Oct 27, 2021 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set t... |
| CVE-2021-38379 | MEDIUM | 5.5 | 0.2% | Oct 27, 2021 | The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure. |
| CVE-2021-36756 | MEDIUM | 6.5 | 0.4% | Oct 27, 2021 | CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now