2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24940 | MEDIUM | 6.1 | 1.5% | Mar 14, 2022 | The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an a... |
| CVE-2021-24897 | MEDIUM | 5.4 | 0.6% | Mar 14, 2022 | The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with cla... |
| CVE-2021-24895 | MEDIUM | 4.8 | 0.6% | Mar 14, 2022 | The Cybersoldier WordPress plugin before 1.7.0 does not sanitise and escape the URL settings before outputting it in an ... |
| CVE-2021-24692 | MEDIUM | 6.5 | 1.3% | Mar 14, 2022 | The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any... |
| CVE-2021-43954 | MEDIUM | 4.3 | 0.7% | Mar 14, 2022 | The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have ... |
| CVE-2021-46709 | MEDIUM | 6.1 | 0.6% | Mar 13, 2022 | phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number). |
| CVE-2021-45889 | MEDIUM | 5.4 | 0.6% | Mar 13, 2022 | An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as dem... |
| CVE-2021-45888 | MEDIUM | 4.8 | 0.6% | Mar 13, 2022 | An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of eve... |
| CVE-2021-45887 | CRITICAL | 9.8 | 3.3% | Mar 13, 2022 | An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for u... |
| CVE-2021-45886 | HIGH | 8.8 | 0.5% | Mar 13, 2022 | An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web appli... |
| CVE-2021-36368 | LOW | 3.7 | 1.7% | Mar 13, 2022 | An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but ... |
| CVE-2021-42577 | HIGH | 7.5 | 0.9% | Mar 11, 2022 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client ... |
| CVE-2021-42262 | MEDIUM | 6.5 | 0.8% | Mar 11, 2022 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the O... |
| CVE-2021-41850 | HIGH | 7.8 | 0.4% | Mar 11, 2022 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroa... |
| CVE-2021-41849 | MEDIUM | 5.5 | 0.2% | Mar 11, 2022 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Inform... |
| CVE-2021-41848 | HIGH | 7.8 | 0.4% | Mar 11, 2022 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-... |
| CVE-2021-44667 | MEDIUM | 6.1 | 0.8% | Mar 11, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo param... |
| CVE-2021-33658 | HIGH | 7.8 | 0.2% | Mar 11, 2022 | atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate... |
| CVE-2021-33150 | MEDIUM | 6.8 | 0.3% | Mar 11, 2022 | Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an un... |
| CVE-2021-32478 | MEDIUM | 6.1 | 1.2% | Mar 11, 2022 | The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect ... |
| CVE-2021-32477 | MEDIUM | 4.3 | 0.7% | Mar 11, 2022 | The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with ... |
| CVE-2021-32476 | HIGH | 7.5 | 1.0% | Mar 11, 2022 | A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodl... |
| CVE-2021-32475 | MEDIUM | 5.4 | 0.6% | Mar 11, 2022 | ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10... |
| CVE-2021-32474 | HIGH | 7.2 | 0.9% | Mar 11, 2022 | An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer hos... |
| CVE-2021-32473 | MEDIUM | 5.3 | 1.0% | Mar 11, 2022 | It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.1... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now