2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41148 | HIGH | 8.8 | 1.5% | Oct 15, 2021 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prio... |
| CVE-2021-41147 | HIGH | 7.2 | 1.8% | Oct 15, 2021 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prio... |
| CVE-2021-40992 | HIGH | 7.2 | 1.1% | Oct 15, 2021 | A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag... |
| CVE-2021-40989 | HIGH | 7.8 | 0.2% | Oct 15, 2021 | A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Pol... |
| CVE-2021-40988 | HIGH | 7.2 | 3.8% | Oct 15, 2021 | A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy... |
| CVE-2021-40987 | HIGH | 7.2 | 2.8% | Oct 15, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas... |
| CVE-2021-40986 | HIGH | 7.2 | 2.8% | Oct 15, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas... |
| CVE-2021-37739 | HIGH | 7.2 | 2.8% | Oct 15, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas... |
| CVE-2021-37738 | HIGH | 7.5 | 1.2% | Oct 15, 2021 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ... |
| CVE-2021-37737 | HIGH | 8.8 | 1.1% | Oct 15, 2021 | A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag... |
| CVE-2021-42334 | HIGH | 8.8 | 1.1% | Oct 15, 2021 | The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL... |
| CVE-2021-42333 | HIGH | 8.8 | 1.1% | Oct 15, 2021 | The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL c... |
| CVE-2021-42330 | HIGH | 8.8 | 0.9% | Oct 15, 2021 | The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user... |
| CVE-2021-40999 | HIGH | 7.2 | 1.9% | Oct 15, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas... |
| CVE-2021-42340 | HIGH | 7.5 | 11.0% | Oct 14, 2021 | The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60... |
| CVE-2021-38295 | HIGH | 7.3 | 2.5% | Oct 14, 2021 | In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachmen... |
| CVE-2021-36389 | HIGH | 7.5 | 3.0% | Oct 14, 2021 | In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Ref... |
| CVE-2021-36388 | HIGH | 7.5 | 3.1% | Oct 14, 2021 | In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Obj... |
| CVE-2021-42369 | HIGH | 8.8 | 1.0% | Oct 14, 2021 | Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject ... |
| CVE-2021-42228 | HIGH | 8.8 | 1.0% | Oct 14, 2021 | A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.h... |
| CVE-2021-38346 | HIGH | 8.8 | 1.7% | Oct 14, 2021 | The Brizy Page Builder plugin <= 2.3.11 for WordPress allowed authenticated users to upload executable files to a locati... |
| CVE-2021-37933 | HIGH | 7.5 | 1.5% | Oct 14, 2021 | An LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 could allow an unauthenticated, r... |
| CVE-2021-33177 | HIGH | 8.8 | 9.8% | Oct 14, 2021 | The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation r... |
| CVE-2021-22964 | HIGH | 8.8 | 1.0% | Oct 14, 2021 | A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect... |
| CVE-2021-20599 | HIGH | 7.5 | 1.3% | Oct 14, 2021 | Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC i... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now