2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43721 | MEDIUM | 6.1 | 1.0% | Mar 28, 2022 | Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution... |
| CVE-2021-43725 | MEDIUM | 6.1 | 2.6% | Mar 28, 2022 | There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remot... |
| CVE-2021-46434 | MEDIUM | 5.3 | 0.9% | Mar 28, 2022 | EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the appl... |
| CVE-2021-46433 | CRITICAL | 10 | 1.1% | Mar 28, 2022 | In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox t... |
| CVE-2021-45491 | MEDIUM | 6.5 | 0.8% | Mar 28, 2022 | 3CX System through 2022-03-17 stores cleartext passwords in a database. |
| CVE-2021-45490 | CRITICAL | 9.1 | 1.1% | Mar 28, 2022 | The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 l... |
| CVE-2021-44617 | CRITICAL | 9.8 | 2.1% | Mar 28, 2022 | A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.... |
| CVE-2021-44213 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message. |
| CVE-2021-44212 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring. |
| CVE-2021-44211 | MEDIUM | 5.4 | 0.7% | Mar 28, 2022 | OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature. |
| CVE-2021-44210 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | OX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data. |
| CVE-2021-44209 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO. |
| CVE-2021-44208 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat. |
| CVE-2021-26601 | HIGH | 8.1 | 3.2% | Mar 28, 2022 | ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal. |
| CVE-2021-26600 | CRITICAL | 9.8 | 5.5% | Mar 28, 2022 | ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= inste... |
| CVE-2021-26599 | CRITICAL | 9.8 | 19.4% | Mar 28, 2022 | ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection. |
| CVE-2021-26598 | MEDIUM | 5.3 | 10.8% | Mar 28, 2022 | ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated atta... |
| CVE-2021-44127 | CRITICAL | 9.8 | 3.3% | Mar 27, 2022 | In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execut... |
| CVE-2021-40906 | MEDIUM | 6.1 | 1.0% | Mar 25, 2022 | CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in... |
| CVE-2021-40905 | HIGH | 8.8 | 3.2% | Mar 25, 2022 | The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uplo... |
| CVE-2021-40904 | HIGH | 8.8 | 3.8% | Mar 25, 2022 | The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dok... |
| CVE-2021-44683 | HIGH | 8.2 | 1.0% | Mar 25, 2022 | The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open functi... |
| CVE-2021-44905 | HIGH | 8.2 | 1.3% | Mar 25, 2022 | Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attac... |
| CVE-2021-4203 | MEDIUM | 6.8 | 1.8% | Mar 25, 2022 | A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race w... |
| CVE-2021-4202 | HIGH | 7 | 0.4% | Mar 25, 2022 | A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kern... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now