2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24898 | MEDIUM | 4.8 | 0.6% | Feb 28, 2022 | The EditableTable WordPress plugin through 0.1.4 does not sanitise and escape any of the Table and Column fields, which ... |
| CVE-2021-24864 | HIGH | 8.8 | 1.2% | Feb 28, 2022 | The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a S... |
| CVE-2021-24823 | HIGH | 8.1 | 0.5% | Feb 28, 2022 | The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php... |
| CVE-2021-24820 | MEDIUM | 6.5 | 2.9% | Feb 28, 2022 | The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ ... |
| CVE-2021-24803 | HIGH | 8.8 | 0.6% | Feb 28, 2022 | The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin... |
| CVE-2021-24730 | MEDIUM | 4.3 | 0.3% | Feb 28, 2022 | The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lsw... |
| CVE-2021-24704 | HIGH | 8.8 | 0.6% | Feb 28, 2022 | In the Orange Form WordPress plugin through 1.0, the process_bulk_action() function in "admin/orange-form-email.php" per... |
| CVE-2021-24689 | MEDIUM | 4.9 | 1.3% | Feb 28, 2022 | The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to downl... |
| CVE-2021-24688 | MEDIUM | 4.3 | 0.4% | Feb 28, 2022 | The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls,... |
| CVE-2021-43945 | MEDIUM | 4.8 | 0.6% | Feb 28, 2022 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permission... |
| CVE-2021-21708 | CRITICAL | 9.8 | 3.0% | Feb 27, 2022 | In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_V... |
| CVE-2021-3967 | HIGH | 8.8 | 0.8% | Feb 26, 2022 | Improper Access Control in GitHub repository zulip/zulip prior to 4.10. |
| CVE-2021-46702 | MEDIUM | 5.5 | 0.4% | Feb 26, 2022 | Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to... |
| CVE-2021-44132 | HIGH | 7.8 | 3.1% | Feb 25, 2022 | A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers t... |
| CVE-2021-42952 | CRITICAL | 9.9 | 1.7% | Feb 25, 2022 | Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability. Upon launching Remote Code Execution fr... |
| CVE-2021-23495 | MEDIUM | 6.1 | 0.9% | Feb 25, 2022 | The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parame... |
| CVE-2021-42244 | MEDIUM | 6.1 | 0.6% | Feb 25, 2022 | A cross-site scripting (XSS) vulnerability in PaquitoSoftware Notimoo v1.2 allows attackers to execute arbitrary web scr... |
| CVE-2021-40046 | CRITICAL | 9.8 | 0.7% | Feb 25, 2022 | PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to ac... |
| CVE-2021-40043 | HIGH | 7.8 | 0.4% | Feb 25, 2022 | The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00)... |
| CVE-2021-37504 | MEDIUM | 6.1 | 0.9% | Feb 25, 2022 | A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers t... |
| CVE-2021-37103 | MEDIUM | 5.5 | 0.1% | Feb 25, 2022 | There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerabili... |
| CVE-2021-37027 | HIGH | 7.5 | 0.6% | Feb 25, 2022 | There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
| CVE-2021-26617 | CRITICAL | 9.8 | 1.2% | Feb 25, 2022 | This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows rem... |
| CVE-2021-22489 | HIGH | 7.5 | 0.6% | Feb 25, 2022 | There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availabili... |
| CVE-2021-22480 | CRITICAL | 9.8 | 0.7% | Feb 25, 2022 | The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vulne... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now