2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42536 | MEDIUM | 6.5 | 0.9% | Oct 22, 2021 | The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read gl... |
| CVE-2021-42534 | MEDIUM | 6.1 | 0.6% | Oct 22, 2021 | The affected product’s web application does not properly neutralize the input during webpage generation, which could all... |
| CVE-2021-0706 | MEDIUM | 5.5 | 0.1% | Oct 22, 2021 | In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missin... |
| CVE-2021-0703 | MEDIUM | 6.8 | 0.1% | Oct 22, 2021 | In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to... |
| CVE-2021-0702 | MEDIUM | 5.5 | 0.1% | Oct 22, 2021 | In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore... |
| CVE-2021-0651 | MEDIUM | 5.5 | 0.1% | Oct 22, 2021 | In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to in... |
| CVE-2021-0643 | MEDIUM | 5.5 | 0.1% | Oct 22, 2021 | In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without ... |
| CVE-2021-41747 | MEDIUM | 6.1 | 0.6% | Oct 22, 2021 | Cross-Site Scripting (XSS) vulnerability exists in Csdn APP 4.10.0, which can be exploited by attackers to obtain sensit... |
| CVE-2021-38465 | MEDIUM | 6.5 | 0.8% | Oct 22, 2021 | The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consum... |
| CVE-2021-38455 | MEDIUM | 6.5 | 0.7% | Oct 22, 2021 | The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will... |
| CVE-2021-38451 | MEDIUM | 5.7 | 0.6% | Oct 22, 2021 | The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those funct... |
| CVE-2021-35230 | MEDIUM | 6.7 | 0.3% | Oct 22, 2021 | As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker... |
| CVE-2021-31682 | MEDIUM | 6.1 | 10.5% | Oct 22, 2021 | The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for re... |
| CVE-2021-31835 | MEDIUM | 4.8 | 0.5% | Oct 22, 2021 | Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrator... |
| CVE-2021-31834 | MEDIUM | 5.4 | 0.4% | Oct 22, 2021 | Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO admini... |
| CVE-2021-41169 | MEDIUM | 4.8 | 0.6% | Oct 21, 2021 | Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subje... |
| CVE-2021-36869 | MEDIUM | 6.1 | 0.7% | Oct 21, 2021 | Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable para... |
| CVE-2021-27746 | MEDIUM | 5.4 | 0.5% | Oct 21, 2021 | "HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability" |
| CVE-2021-41168 | MEDIUM | 6.5 | 0.9% | Oct 21, 2021 | Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affec... |
| CVE-2021-39357 | MEDIUM | 4.8 | 0.9% | Oct 21, 2021 | The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and... |
| CVE-2021-39356 | MEDIUM | 4.8 | 1.0% | Oct 21, 2021 | The Content Staging WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation a... |
| CVE-2021-39354 | MEDIUM | 4.8 | 0.9% | Oct 21, 2021 | The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end... |
| CVE-2021-39348 | MEDIUM | 4.8 | 5.0% | Oct 21, 2021 | The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom... |
| CVE-2021-39328 | MEDIUM | 4.8 | 0.9% | Oct 21, 2021 | The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $... |
| CVE-2021-42715 | MEDIUM | 5.5 | 1.2% | Oct 21, 2021 | An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now