2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39355 | MEDIUM | 4.8 | 1.0% | Oct 19, 2021 | The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validati... |
| CVE-2021-39343 | MEDIUM | 4.8 | 1.0% | Oct 19, 2021 | The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and... |
| CVE-2021-39329 | MEDIUM | 4.8 | 1.0% | Oct 19, 2021 | The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sa... |
| CVE-2021-36832 | MEDIUM | 5.4 | 0.6% | Oct 19, 2021 | WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline" ... |
| CVE-2021-27001 | MEDIUM | 5.5 | 0.2% | Oct 19, 2021 | Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability ... |
| CVE-2021-26589 | MEDIUM | 6.1 | 0.5% | Oct 19, 2021 | A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotel... |
| CVE-2021-30850 | MEDIUM | 5.5 | 0.9% | Oct 19, 2021 | An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalin... |
| CVE-2021-30845 | MEDIUM | 5.5 | 0.2% | Oct 19, 2021 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local us... |
| CVE-2021-30828 | MEDIUM | 5.5 | 0.3% | Oct 19, 2021 | This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 1... |
| CVE-2021-30819 | MEDIUM | 5.5 | 0.8% | Oct 19, 2021 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Process... |
| CVE-2021-30811 | MEDIUM | 5.5 | 0.3% | Oct 19, 2021 | This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker ... |
| CVE-2021-30810 | MEDIUM | 4.3 | 0.5% | Oct 19, 2021 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchO... |
| CVE-2021-3879 | MEDIUM | 5.4 | 0.8% | Oct 19, 2021 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-3863 | MEDIUM | 6.1 | 0.8% | Oct 19, 2021 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-3851 | MEDIUM | 5.4 | 0.6% | Oct 19, 2021 | firefly-iii is vulnerable to URL Redirection to Untrusted Site |
| CVE-2021-38482 | MEDIUM | 4.8 | 0.5% | Oct 19, 2021 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to ... |
| CVE-2021-38476 | MEDIUM | 5.3 | 0.7% | Oct 19, 2021 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and valida... |
| CVE-2021-38472 | MEDIUM | 4.7 | 0.7% | Oct 19, 2021 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTION... |
| CVE-2021-38468 | MEDIUM | 4.8 | 0.5% | Oct 19, 2021 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may ... |
| CVE-2021-38466 | MEDIUM | 6.1 | 0.7% | Oct 19, 2021 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client... |
| CVE-2021-25968 | MEDIUM | 5.4 | 0.5% | Oct 19, 2021 | In “OpenCMS”, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged applicatio... |
| CVE-2021-20836 | MEDIUM | 6.5 | 0.8% | Oct 19, 2021 | Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privile... |
| CVE-2021-42650 | MEDIUM | 6.1 | 0.6% | Oct 18, 2021 | Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates. |
| CVE-2021-41156 | MEDIUM | 5.4 | 0.5% | Oct 18, 2021 | anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browser_today hidden c... |
| CVE-2021-41151 | MEDIUM | 4.9 | 1.3% | Oct 18, 2021 | Backstage is an open platform for building developer portals. In affected versions A malicious actor could read sensitiv... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now