2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39872 | MEDIUM | 6.5 | 1.0% | Oct 5, 2021 | In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired p... |
| CVE-2021-39869 | MEDIUM | 6.5 | 1.2% | Oct 5, 2021 | In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project. |
| CVE-2021-39866 | MEDIUM | 5.4 | 1.0% | Oct 5, 2021 | A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project acc... |
| CVE-2021-35506 | MEDIUM | 6.1 | 0.7% | Oct 5, 2021 | Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor fo... |
| CVE-2021-39887 | MEDIUM | 5.4 | 0.8% | Oct 5, 2021 | A stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE version 8.4 and above allowe... |
| CVE-2021-37223 | MEDIUM | 6.5 | 7.5% | Oct 5, 2021 | Nagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. ... |
| CVE-2021-35503 | MEDIUM | 6.1 | 0.7% | Oct 5, 2021 | Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity... |
| CVE-2021-41123 | MEDIUM | 5.3 | 0.9% | Oct 4, 2021 | Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application pu... |
| CVE-2021-41091 | MEDIUM | 6.3 | 2.7% | Oct 4, 2021 | Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker En... |
| CVE-2021-41089 | MEDIUM | 6.3 | 0.3% | Oct 4, 2021 | Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker En... |
| CVE-2021-41094 | MEDIUM | 4.6 | 0.2% | Oct 4, 2021 | Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by si... |
| CVE-2021-39347 | MEDIUM | 4.3 | 0.6% | Oct 4, 2021 | The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes... |
| CVE-2021-38400 | MEDIUM | 6.8 | 0.1% | Oct 4, 2021 | An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create ... |
| CVE-2021-38398 | MEDIUM | 6.8 | 0.4% | Oct 4, 2021 | The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker ... |
| CVE-2021-38396 | MEDIUM | 6.8 | 0.2% | Oct 4, 2021 | The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on... |
| CVE-2021-38394 | MEDIUM | 6.4 | 0.2% | Oct 4, 2021 | An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engin... |
| CVE-2021-32672 | MEDIUM | 4.3 | 1.7% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send mal... |
| CVE-2021-23856 | MEDIUM | 6.1 | 0.6% | Oct 4, 2021 | The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s c... |
| CVE-2021-41596 | MEDIUM | 5.3 | 1.8% | Oct 4, 2021 | SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially inc... |
| CVE-2021-41595 | MEDIUM | 5.3 | 1.8% | Oct 4, 2021 | SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially inc... |
| CVE-2021-39899 | MEDIUM | 4.2 | 0.2% | Oct 4, 2021 | In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s passwor... |
| CVE-2021-39885 | MEDIUM | 5.4 | 1.0% | Oct 4, 2021 | A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions ... |
| CVE-2021-39883 | MEDIUM | 4.3 | 0.7% | Oct 4, 2021 | Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from... |
| CVE-2021-39877 | MEDIUM | 5.5 | 1.0% | Oct 4, 2021 | A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resour... |
| CVE-2021-39874 | MEDIUM | 4.3 | 0.9% | Oct 4, 2021 | In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git command... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now