2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43479 | CRITICAL | 9.8 | 2.4% | Mar 31, 2022 | A Remote Code Execution (RCE) vulnerability exists in The-Secretary 2.5 via install.php. |
| CVE-2021-43484 | CRITICAL | 9.8 | 3.3% | Mar 31, 2022 | A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failu... |
| CVE-2021-43478 | MEDIUM | 5.4 | 0.8% | Mar 31, 2022 | A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in t... |
| CVE-2021-37517 | HIGH | 7.5 | 0.9% | Mar 31, 2022 | An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password functi... |
| CVE-2021-42946 | MEDIUM | 4.8 | 0.5% | Mar 31, 2022 | A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page. |
| CVE-2021-42869 | MEDIUM | 4.8 | 0.5% | Mar 31, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parame... |
| CVE-2021-42868 | MEDIUM | 4.8 | 0.8% | Mar 31, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parame... |
| CVE-2021-42867 | MEDIUM | 4.8 | 0.6% | Mar 31, 2022 | A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description field in (1) admin/config, ... |
| CVE-2021-42866 | MEDIUM | 4.8 | 0.5% | Mar 31, 2022 | A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.... |
| CVE-2021-36625 | HIGH | 8.8 | 0.9% | Mar 31, 2022 | An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 (fixed version is 14.0.0) via a POST request to the cou... |
| CVE-2021-43506 | CRITICAL | 9.8 | 1.6% | Mar 31, 2022 | An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter i... |
| CVE-2021-43505 | MEDIUM | 5.4 | 0.5% | Mar 31, 2022 | Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via (1) ... |
| CVE-2021-34257 | HIGH | 8.8 | 1.7% | Mar 31, 2022 | Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload t... |
| CVE-2021-20729 | MEDIUM | 6.1 | 2.8% | Mar 31, 2022 | Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and p... |
| CVE-2021-43663 | HIGH | 7.5 | 1.0% | Mar 31, 2022 | totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cl... |
| CVE-2021-43662 | MEDIUM | 6.5 | 0.5% | Mar 31, 2022 | totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontroll... |
| CVE-2021-43661 | MEDIUM | 6.1 | 0.6% | Mar 31, 2022 | totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability v... |
| CVE-2021-46010 | HIGH | 8.8 | 1.6% | Mar 30, 2022 | Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is... |
| CVE-2021-46009 | CRITICAL | 9.8 | 15.2% | Mar 30, 2022 | In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, ad... |
| CVE-2021-46008 | HIGH | 8.8 | 1.2% | Mar 30, 2022 | In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An atta... |
| CVE-2021-46007 | CRITICAL | 9.8 | 3.6% | Mar 30, 2022 | totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command,... |
| CVE-2021-46006 | MEDIUM | 6.5 | 7.2% | Mar 30, 2022 | In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function... |
| CVE-2021-43664 | HIGH | 8.1 | 1.7% | Mar 30, 2022 | totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component pr... |
| CVE-2021-33523 | HIGH | 7.2 | 1.8% | Mar 30, 2022 | MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new J... |
| CVE-2021-45900 | MEDIUM | 6.5 | 0.7% | Mar 30, 2022 | Vivoh Webinar Manager before 3.6.3.0 has improper API authentication. When a user logs in to the administration configur... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now