2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22572 | MEDIUM | 5.5 | 0.1% | Mar 29, 2022 | On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.... |
| CVE-2021-46743 | CRITICAL | 9.1 | 0.8% | Mar 29, 2022 | In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) hea... |
| CVE-2021-45866 | MEDIUM | 5.4 | 0.5% | Mar 29, 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via ... |
| CVE-2021-45865 | CRITICAL | 9.8 | 1.4% | Mar 29, 2022 | A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functio... |
| CVE-2021-44581 | HIGH | 7.5 | 1.0% | Mar 29, 2022 | An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter. |
| CVE-2021-43105 | MEDIUM | 4.3 | 0.6% | Mar 28, 2022 | A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific maliciou... |
| CVE-2021-43103 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote m... |
| CVE-2021-43102 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote ma... |
| CVE-2021-43101 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a... |
| CVE-2021-43100 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote m... |
| CVE-2021-43099 | MEDIUM | 4.9 | 1.1% | Mar 28, 2022 | An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.... |
| CVE-2021-43098 | HIGH | 7.2 | 1.2% | Mar 28, 2022 | A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. |
| CVE-2021-43097 | HIGH | 7.2 | 2.2% | Mar 28, 2022 | A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a ma... |
| CVE-2021-4191 | MEDIUM | 5.3 | 80.0% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Priv... |
| CVE-2021-39876 | MEDIUM | 4.3 | 0.8% | Mar 28, 2022 | In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of p... |
| CVE-2021-25071 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The WordPress plugin through 2.0.1 does not sanitise and escape the translation parameter before outputting it back in a... |
| CVE-2021-25070 | CRITICAL | 9.8 | 1.6% | Mar 28, 2022 | The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in ... |
| CVE-2021-25068 | HIGH | 7.2 | 1.3% | Mar 28, 2022 | The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter wh... |
| CVE-2021-25064 | HIGH | 7.2 | 1.3% | Mar 28, 2022 | The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a... |
| CVE-2021-25012 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them... |
| CVE-2021-24978 | MEDIUM | 5.3 | 0.5% | Mar 28, 2022 | The OSMapper WordPress plugin through 2.1.5 contains an AJAX action to delete a plugin related post type named 'map' and... |
| CVE-2021-24962 | HIGH | 8.8 | 2.8% | Mar 28, 2022 | The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to ... |
| CVE-2021-24746 | MEDIUM | 6.1 | 2.2% | Mar 28, 2022 | The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back i... |
| CVE-2021-44124 | HIGH | 7.5 | 1.9% | Mar 28, 2022 | Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input d... |
| CVE-2021-44103 | — | — | — | Mar 28, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-42192. Reason: This candidate is a duplicate of ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now