2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24960 | MEDIUM | 5.4 | 0.8% | Mar 7, 2022 | The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allow... |
| CVE-2021-24953 | MEDIUM | 6.1 | 0.8% | Mar 7, 2022 | The Advanced iFrame WordPress plugin before 2022 does not sanitise and escape the ai_config_id parameter before outputti... |
| CVE-2021-24952 | HIGH | 8.8 | 1.3% | Mar 7, 2022 | The Conversios.io WordPress plugin before 4.6.2 does not sanitise, validate and escape the sync_progressive_data paramet... |
| CVE-2021-24826 | MEDIUM | 5.4 | 0.6% | Mar 7, 2022 | The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which c... |
| CVE-2021-24825 | MEDIUM | 4.3 | 0.4% | Mar 7, 2022 | The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, whic... |
| CVE-2021-24824 | MEDIUM | 4.3 | 0.8% | Mar 7, 2022 | The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated use... |
| CVE-2021-24821 | MEDIUM | 5.4 | 0.6% | Mar 7, 2022 | The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-S... |
| CVE-2021-24810 | MEDIUM | 4.8 | 0.6% | Mar 7, 2022 | The WP Event Manager WordPress plugin before 3.1.23 does not escape some of its Field Editor settings when outputting th... |
| CVE-2021-24778 | HIGH | 7.2 | 1.3% | Mar 7, 2022 | The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or ... |
| CVE-2021-24777 | HIGH | 7.2 | 1.3% | Mar 7, 2022 | The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the s... |
| CVE-2021-24216 | HIGH | 7.2 | 1.7% | Mar 7, 2022 | The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows admin... |
| CVE-2021-44749 | CRITICAL | 9.6 | 0.8% | Mar 6, 2022 | A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to caus... |
| CVE-2021-44748 | MEDIUM | 6.1 | 0.5% | Mar 6, 2022 | A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerab... |
| CVE-2021-46704 | CRITICAL | 9.8 | 21.9% | Mar 6, 2022 | In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping ... |
| CVE-2021-46703 | CRITICAL | 9.8 | 1.8% | Mar 6, 2022 | In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .N... |
| CVE-2021-46384 | CRITICAL | 9.8 | 2.1% | Mar 4, 2022 | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The at... |
| CVE-2021-46353 | MEDIUM | 5.3 | 2.1% | Mar 4, 2022 | An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacke... |
| CVE-2021-44827 | HIGH | 8.8 | 54.0% | Mar 4, 2022 | There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devi... |
| CVE-2021-40846 | HIGH | 7.5 | 0.7% | Mar 4, 2022 | An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check, and reque... |
| CVE-2021-32008 | HIGH | 8.7 | 1.0% | Mar 4, 2022 | This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname ... |
| CVE-2021-27756 | HIGH | 7.5 | 0.5% | Mar 4, 2022 | "TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled... |
| CVE-2021-43590 | MEDIUM | 6 | 0.1% | Mar 4, 2022 | Dell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a Plain-text password st... |
| CVE-2021-3737 | HIGH | 7.5 | 11.6% | Mar 4, 2022 | A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote att... |
| CVE-2021-3656 | HIGH | 8.8 | 0.7% | Mar 4, 2022 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMC... |
| CVE-2021-27757 | HIGH | 7.5 | 0.6% | Mar 4, 2022 | " Insecure password storage issue.The application stores sensitive information in cleartext within a resource that might... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now