2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33602 | MEDIUM | 5.3 | 0.6% | Oct 6, 2021 | A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZ... |
| CVE-2021-24021 | MEDIUM | 5.4 | 0.6% | Oct 6, 2021 | An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below an... |
| CVE-2021-41122 | MEDIUM | 4.3 | 0.8% | Oct 5, 2021 | Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly valida... |
| CVE-2021-33849 | MEDIUM | 5.4 | 1.0% | Oct 5, 2021 | A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser i... |
| CVE-2021-31986 | MEDIUM | 6.8 | 0.8% | Oct 5, 2021 | User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow... |
| CVE-2021-3436 | MEDIUM | 6.5 | 0.9% | Oct 5, 2021 | BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known... |
| CVE-2021-41114 | MEDIUM | 5.3 | 1.2% | Oct 5, 2021 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that ... |
| CVE-2021-35492 | MEDIUM | 6.5 | 3.3% | Oct 5, 2021 | Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources vi... |
| CVE-2021-41555 | MEDIUM | 6.1 | 0.7% | Oct 5, 2021 | In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflo... |
| CVE-2021-39880 | MEDIUM | 6.5 | 1.3% | Oct 5, 2021 | A Denial Of Service vulnerability in the apollo_upload_server Ruby gem in GitLab CE/EE all versions starting from 11.9 b... |
| CVE-2021-39891 | MEDIUM | 4.9 | 0.9% | Oct 5, 2021 | In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are ... |
| CVE-2021-39889 | MEDIUM | 4.3 | 0.8% | Oct 5, 2021 | In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint m... |
| CVE-2021-39886 | MEDIUM | 4.3 | 0.5% | Oct 5, 2021 | Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions startin... |
| CVE-2021-39870 | MEDIUM | 4.3 | 0.9% | Oct 5, 2021 | In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enab... |
| CVE-2021-22264 | MEDIUM | 6.5 | 1.0% | Oct 5, 2021 | An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting fr... |
| CVE-2021-22262 | MEDIUM | 4.3 | 0.7% | Oct 5, 2021 | Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before ... |
| CVE-2021-22261 | MEDIUM | 4.8 | 1.0% | Oct 5, 2021 | A stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab versions starting from 13.9 before 14.... |
| CVE-2021-22258 | MEDIUM | 4.3 | 1.0% | Oct 5, 2021 | The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses |
| CVE-2021-22257 | MEDIUM | 5.3 | 0.9% | Oct 5, 2021 | An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting fr... |
| CVE-2021-39894 | MEDIUM | 5.4 | 0.6% | Oct 5, 2021 | In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be... |
| CVE-2021-39888 | MEDIUM | 4.3 | 1.0% | Oct 5, 2021 | In all versions of GitLab EE starting from 13.10 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all v... |
| CVE-2021-39884 | MEDIUM | 4.3 | 1.0% | Oct 5, 2021 | In all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups that have access to a pro... |
| CVE-2021-39882 | MEDIUM | 5.3 | 0.6% | Oct 5, 2021 | In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information abo... |
| CVE-2021-39878 | MEDIUM | 5.4 | 0.8% | Oct 5, 2021 | A stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.0 up to 14.3.1 allowe... |
| CVE-2021-39875 | MEDIUM | 5.3 | 1.1% | Oct 5, 2021 | In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or pub... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now