2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24412 | MEDIUM | 5.4 | 0.6% | Oct 18, 2021 | The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters fro... |
| CVE-2021-22942 | MEDIUM | 6.1 | 1.6% | Oct 18, 2021 | A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow att... |
| CVE-2021-42566 | MEDIUM | 6.1 | 5.8% | Oct 18, 2021 | myfactory.FMS before 7.1-912 allows XSS via the Error parameter. |
| CVE-2021-42565 | MEDIUM | 6.1 | 5.8% | Oct 18, 2021 | myfactory.FMS before 7.1-912 allows XSS via the UID parameter. |
| CVE-2021-36097 | MEDIUM | 4.3 | 0.5% | Oct 18, 2021 | Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the q... |
| CVE-2021-41320 | MEDIUM | 5.5 | 0.2% | Oct 15, 2021 | A technical user has hardcoded credentials in Wallstreet Suite TRM 7.4.83 (64-bit edition) with higher privilege than th... |
| CVE-2021-40995 | MEDIUM | 6.3 | 1.1% | Oct 15, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas... |
| CVE-2021-40994 | MEDIUM | 6.3 | 1.1% | Oct 15, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas... |
| CVE-2021-40721 | MEDIUM | 6.1 | 1.0% | Oct 15, 2021 | Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an at... |
| CVE-2021-39864 | MEDIUM | 6.5 | 1.6% | Oct 15, 2021 | Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-si... |
| CVE-2021-40990 | MEDIUM | 6.5 | 1.1% | Oct 15, 2021 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ... |
| CVE-2021-3875 | MEDIUM | 5.5 | 1.4% | Oct 15, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-3874 | MEDIUM | 6.5 | 1.2% | Oct 15, 2021 | bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2021-39349 | MEDIUM | 4.8 | 1.1% | Oct 15, 2021 | The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation an... |
| CVE-2021-39345 | MEDIUM | 4.8 | 0.9% | Oct 15, 2021 | The HAL WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitizat... |
| CVE-2021-39344 | MEDIUM | 4.8 | 1.0% | Oct 15, 2021 | The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation... |
| CVE-2021-39338 | MEDIUM | 4.8 | 0.9% | Oct 15, 2021 | The MyBB Cross-Poster WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation... |
| CVE-2021-39337 | MEDIUM | 4.8 | 0.9% | Oct 15, 2021 | The job-portal WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sa... |
| CVE-2021-39336 | MEDIUM | 4.8 | 0.9% | Oct 15, 2021 | The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and s... |
| CVE-2021-39335 | MEDIUM | 4.8 | 0.9% | Oct 15, 2021 | The WpGenius Job Listing WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validat... |
| CVE-2021-39334 | MEDIUM | 4.8 | 0.9% | Oct 15, 2021 | The Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation ... |
| CVE-2021-39332 | MEDIUM | 4.8 | 0.5% | Oct 15, 2021 | The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation ... |
| CVE-2021-38431 | MEDIUM | 4.3 | 0.7% | Oct 15, 2021 | An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose proj... |
| CVE-2021-42336 | MEDIUM | 4.3 | 0.8% | Oct 15, 2021 | The learning history page of the Easytest is vulnerable by permission bypass. After obtaining a user’s permission, remot... |
| CVE-2021-42335 | MEDIUM | 5.4 | 0.6% | Oct 15, 2021 | Easytest bulletin board management function of online learning platform does not filter special characters. After obtain... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now