2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41086 | MEDIUM | 5.4 | 1.0% | Sep 21, 2021 | jsuites is an open source collection of common required javascript web components. In affected versions users are subjec... |
| CVE-2021-41084 | MEDIUM | 4.7 | 1.2% | Sep 21, 2021 | http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or re... |
| CVE-2021-40868 | MEDIUM | 6.1 | 9.1% | Sep 21, 2021 | In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS. |
| CVE-2021-39230 | MEDIUM | 6.5 | 0.7% | Sep 21, 2021 | Butter is a system usability utility. Due to a kernel error the JPNS kernel is being discontinued. Affected users are re... |
| CVE-2021-23443 | MEDIUM | 6.1 | 0.9% | Sep 21, 2021 | This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization w... |
| CVE-2021-29795 | MEDIUM | 6 | 0.2% | Sep 21, 2021 | IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of... |
| CVE-2021-41525 | MEDIUM | 5.5 | 0.2% | Sep 21, 2021 | An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNe... |
| CVE-2021-37420 | MEDIUM | 6.5 | 1.9% | Sep 21, 2021 | Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing. |
| CVE-2021-26333 | MEDIUM | 5.5 | 0.5% | Sep 21, 2021 | An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionar... |
| CVE-2021-20829 | MEDIUM | 6.1 | 0.7% | Sep 21, 2021 | Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows r... |
| CVE-2021-34650 | MEDIUM | 6.1 | 0.8% | Sep 20, 2021 | The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the ~/adm... |
| CVE-2021-39325 | MEDIUM | 6.1 | 0.9% | Sep 20, 2021 | The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation i... |
| CVE-2021-38899 | MEDIUM | 4.4 | 0.3% | Sep 20, 2021 | IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM ... |
| CVE-2021-29856 | MEDIUM | 6.5 | 1.1% | Sep 20, 2021 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI M... |
| CVE-2021-29821 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul... |
| CVE-2021-29820 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul... |
| CVE-2021-29819 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul... |
| CVE-2021-29818 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul... |
| CVE-2021-29817 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vul... |
| CVE-2021-29811 | MEDIUM | 4.9 | 0.9% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text whi... |
| CVE-2021-29809 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T... |
| CVE-2021-29808 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T... |
| CVE-2021-29807 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T... |
| CVE-2021-29806 | MEDIUM | 5.4 | 0.5% | Sep 20, 2021 | IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. T... |
| CVE-2021-39598 | MEDIUM | 5.5 | 0.6% | Sep 20, 2021 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function callcode() locat... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now