2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27789 | MEDIUM | 6.5 | 0.8% | Mar 18, 2022 | The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements... |
| CVE-2021-23209 | MEDIUM | 4.8 | 0.5% | Mar 18, 2022 | Multiple Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) vulnerabilities discovered in AMP for WP ... |
| CVE-2021-23150 | MEDIUM | 4.8 | 0.5% | Mar 18, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in AMP for WP – Accelerated Mobile Pag... |
| CVE-2021-39046 | MEDIUM | 4.9 | 0.9% | Mar 18, 2022 | IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user cre... |
| CVE-2021-29899 | MEDIUM | 6.5 | 1.0% | Mar 18, 2022 | IBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user to cause a denial of ser... |
| CVE-2021-45835 | CRITICAL | 9.8 | 3.0% | Mar 18, 2022 | The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the... |
| CVE-2021-45834 | CRITICAL | 9.8 | 2.3% | Mar 18, 2022 | An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass... |
| CVE-2021-22571 | MEDIUM | 5.5 | 0.2% | Mar 18, 2022 | A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process ... |
| CVE-2021-45868 | MEDIUM | 5.5 | 1.3% | Mar 18, 2022 | In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk).... |
| CVE-2021-45968 | HIGH | 7.5 | 10.7% | Mar 18, 2022 | An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Pho... |
| CVE-2021-45967 | CRITICAL | 9.8 | 20.8% | Mar 18, 2022 | An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend To... |
| CVE-2021-45966 | CRITICAL | 9.8 | 5.6% | Mar 18, 2022 | An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.p... |
| CVE-2021-44088 | CRITICAL | 9.8 | 3.3% | Mar 17, 2022 | An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacke... |
| CVE-2021-44087 | CRITICAL | 9.8 | 4.7% | Mar 17, 2022 | A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows an ... |
| CVE-2021-43961 | MEDIUM | 4.3 | 0.7% | Mar 17, 2022 | Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection. |
| CVE-2021-46107 | HIGH | 7.5 | 7.4% | Mar 17, 2022 | Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacke... |
| CVE-2021-45040 | CRITICAL | 9.8 | 3.1% | Mar 17, 2022 | The Spatie media-library-pro library through 1.17.10 and 2.x through 2.1.6 for Laravel allows remote attackers to upload... |
| CVE-2021-44907 | — | — | — | Mar 17, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-44906 | CRITICAL | 9.8 | 4.6% | Mar 17, 2022 | Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). |
| CVE-2021-44262 | HIGH | 7.5 | 2.2% | Mar 17, 2022 | A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote att... |
| CVE-2021-44261 | MEDIUM | 5.3 | 20.8% | Mar 17, 2022 | A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote at... |
| CVE-2021-44260 | HIGH | 7.5 | 7.6% | Mar 17, 2022 | A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can al... |
| CVE-2021-44259 | CRITICAL | 9.8 | 1.9% | Mar 17, 2022 | A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a ... |
| CVE-2021-45794 | HIGH | 7.5 | 1.0% | Mar 17, 2022 | Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained. |
| CVE-2021-45793 | HIGH | 7.5 | 4.6% | Mar 17, 2022 | Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now