2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25220 | MEDIUM | 6.8 | 3.3% | Mar 23, 2022 | BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.... |
| CVE-2021-45757 | HIGH | 7.5 | 1.8% | Mar 23, 2022 | ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (Do... |
| CVE-2021-45756 | CRITICAL | 9.8 | 1.7% | Mar 23, 2022 | Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.... |
| CVE-2021-33961 | MEDIUM | 6.1 | 0.7% | Mar 22, 2022 | A Cross Site Scripting (XSS) vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter. |
| CVE-2021-41736 | CRITICAL | 9.8 | 1.4% | Mar 22, 2022 | Faust v2.35.0 was discovered to contain a heap-buffer overflow in the function realPropagate() at propagate.cpp. |
| CVE-2021-43650 | CRITICAL | 9.8 | 6.2% | Mar 22, 2022 | WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username during the login process. |
| CVE-2021-45810 | HIGH | 7.5 | 0.8% | Mar 22, 2022 | GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService thro... |
| CVE-2021-45809 | CRITICAL | 9.8 | 1.6% | Mar 22, 2022 | GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GU... |
| CVE-2021-40662 | HIGH | 8.8 | 1.1% | Mar 21, 2022 | A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim host... |
| CVE-2021-38745 | MEDIUM | 6.8 | 0.8% | Mar 21, 2022 | Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execu... |
| CVE-2021-46390 | MEDIUM | 6.8 | 0.5% | Mar 21, 2022 | An access control issue in the authentication module of Lexar_F35 v1.0.34 allows attackers to access sensitive data and ... |
| CVE-2021-25019 | MEDIUM | 6.1 | 0.8% | Mar 21, 2022 | The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it b... |
| CVE-2021-24905 | HIGH | 8 | 0.7% | Mar 21, 2022 | The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_... |
| CVE-2021-45117 | MEDIUM | 6.5 | 1.4% | Mar 21, 2022 | The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointe... |
| CVE-2021-45878 | CRITICAL | 9.1 | 1.1% | Mar 21, 2022 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control. Lack of access control on the we... |
| CVE-2021-45877 | CRITICAL | 9.8 | 1.1% | Mar 21, 2022 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /e... |
| CVE-2021-45876 | CRITICAL | 9.8 | 1.5% | Mar 21, 2022 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection. The url parameter of th... |
| CVE-2021-36100 | HIGH | 8.8 | 1.3% | Mar 21, 2022 | Specially crafted string in OTRS system configuration can allow the execution of any system command. |
| CVE-2021-42194 | HIGH | 7.2 | 1.1% | Mar 20, 2022 | The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the... |
| CVE-2021-39384 | CRITICAL | 9.8 | 1.2% | Mar 20, 2022 | DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.j... |
| CVE-2021-39383 | CRITICAL | 9.8 | 2.9% | Mar 20, 2022 | DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysP... |
| CVE-2021-44345 | HIGH | 7.5 | 1.1% | Mar 20, 2022 | Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Inject... |
| CVE-2021-4031 | HIGH | 7.5 | 0.5% | Mar 18, 2022 | Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associate... |
| CVE-2021-44760 | MEDIUM | 5.4 | 0.5% | Mar 18, 2022 | Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 vers... |
| CVE-2021-30771 | HIGH | 7.8 | 1.3% | Mar 18, 2022 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now