2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45414 | CRITICAL | 9.8 | 3.3% | Feb 28, 2022 | A Remote Code Execution (RCE) vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Doc... |
| CVE-2021-41112 | HIGH | 8.1 | 0.7% | Feb 28, 2022 | Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions prior to 3... |
| CVE-2021-41111 | MEDIUM | 5.4 | 0.5% | Feb 28, 2022 | Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.... |
| CVE-2021-44342 | HIGH | 7.8 | 0.7% | Feb 28, 2022 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline() in "/ok... |
| CVE-2021-44331 | HIGH | 7.8 | 0.9% | Feb 28, 2022 | ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise(). |
| CVE-2021-44340 | HIGH | 7.8 | 0.7% | Feb 28, 2022 | David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats pr... |
| CVE-2021-44339 | HIGH | 7.8 | 0.7% | Feb 28, 2022 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats projec... |
| CVE-2021-44334 | HIGH | 7.8 | 0.7% | Feb 28, 2022 | David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats projec... |
| CVE-2021-43086 | CRITICAL | 9.8 | 1.2% | Feb 28, 2022 | ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl o... |
| CVE-2021-4222 | MEDIUM | 4.8 | 0.8% | Feb 28, 2022 | The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege ... |
| CVE-2021-25118 | MEDIUM | 5.3 | 5.8% | Feb 28, 2022 | The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in po... |
| CVE-2021-25112 | MEDIUM | 6.1 | 2.2% | Feb 28, 2022 | The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back... |
| CVE-2021-25081 | MEDIUM | 6.5 | 0.6% | Feb 28, 2022 | The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 does not have CSRF checks in most of its AJAX action... |
| CVE-2021-25042 | MEDIUM | 5.4 | 0.5% | Feb 28, 2022 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.5 does not have authorisation and CSRF checks in... |
| CVE-2021-25034 | MEDIUM | 6.1 | 0.8% | Feb 28, 2022 | The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortc... |
| CVE-2021-25011 | MEDIUM | 5.7 | 0.4% | Feb 28, 2022 | The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most ... |
| CVE-2021-25010 | CRITICAL | 9.6 | 0.6% | Feb 28, 2022 | The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make... |
| CVE-2021-24994 | MEDIUM | 6.1 | 1.2% | Feb 28, 2022 | The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, a... |
| CVE-2021-24977 | MEDIUM | 6.1 | 1.5% | Feb 28, 2022 | The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assign... |
| CVE-2021-24971 | MEDIUM | 5.4 | 0.6% | Feb 28, 2022 | The WP Responsive Menu WordPress plugin before 3.1.7.1 does not have capability and CSRF checks in the wpr_live_update A... |
| CVE-2021-24933 | MEDIUM | 5.4 | 0.6% | Feb 28, 2022 | The Dynamic Widgets WordPress plugin through 1.5.16 does not escape the prefix parameter before outputting it back in an... |
| CVE-2021-24920 | MEDIUM | 4.8 | 0.6% | Feb 28, 2022 | The StatCounter WordPress plugin before 2.0.7 does not sanitise and escape the Project ID and Secure Code settings, whic... |
| CVE-2021-24913 | MEDIUM | 4.3 | 0.5% | Feb 28, 2022 | The Logo Showcase with Slick Slider WordPress plugin before 2.0.1 does not have CSRF check in the lswss_save_attachment_... |
| CVE-2021-24903 | MEDIUM | 4.8 | 0.6% | Feb 28, 2022 | The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which cou... |
| CVE-2021-24901 | MEDIUM | 4.8 | 5.1% | Feb 28, 2022 | The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow hi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now