2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25100 | MEDIUM | 6.1 | 0.9% | Feb 21, 2022 | The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in t... |
| CVE-2021-25099 | MEDIUM | 6.1 | 2.1% | Feb 21, 2022 | The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back i... |
| CVE-2021-25082 | HIGH | 8.8 | 5.4% | Feb 21, 2022 | The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it i... |
| CVE-2021-25075 | LOW | 3.5 | 1.6% | Feb 21, 2022 | The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any authorisation and has a flawed CSRF check in ... |
| CVE-2021-25069 | HIGH | 8.8 | 1.5% | Feb 21, 2022 | The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before using ... |
| CVE-2021-25060 | MEDIUM | 5.4 | 0.6% | Feb 21, 2022 | The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its ... |
| CVE-2021-25058 | MEDIUM | 5.4 | 0.6% | Feb 21, 2022 | The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting (XSS) within ... |
| CVE-2021-25057 | MEDIUM | 5.4 | 0.6% | Feb 21, 2022 | The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting (XS... |
| CVE-2021-25055 | MEDIUM | 6.1 | 2.3% | Feb 21, 2022 | The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site Scripting (XSS) within the "visibility" ... |
| CVE-2021-24921 | MEDIUM | 6.1 | 0.8% | Feb 21, 2022 | The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before ou... |
| CVE-2021-24867 | CRITICAL | 9.8 | 18.9% | Feb 21, 2022 | Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website bei... |
| CVE-2021-46701 | MEDIUM | 6.5 | 0.4% | Feb 20, 2022 | PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit... |
| CVE-2021-45083 | HIGH | 7.1 | 0.3% | Feb 20, 2022 | An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain so... |
| CVE-2021-45081 | MEDIUM | 5.9 | 0.9% | Feb 20, 2022 | An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more se... |
| CVE-2021-45007 | MEDIUM | 6.5 | 0.7% | Feb 20, 2022 | Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on... |
| CVE-2021-46700 | MEDIUM | 6.5 | 0.8% | Feb 19, 2022 | In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double... |
| CVE-2021-45082 | HIGH | 7.8 | 0.5% | Feb 19, 2022 | An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allo... |
| CVE-2021-44302 | HIGH | 8.8 | 1.1% | Feb 19, 2022 | BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parame... |
| CVE-2021-29656 | CRITICAL | 9.8 | 0.7% | Feb 18, 2022 | Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked. |
| CVE-2021-29655 | CRITICAL | 9.8 | 0.5% | Feb 18, 2022 | Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute. |
| CVE-2021-46110 | CRITICAL | 9.8 | 1.1% | Feb 18, 2022 | Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email an... |
| CVE-2021-40841 | MEDIUM | 6.5 | 1.1% | Feb 18, 2022 | A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the u... |
| CVE-2021-40840 | MEDIUM | 5.4 | 0.5% | Feb 18, 2022 | A Stored XSS issue exists in the admin/users user administration form in LiveConfig 2.12.2. |
| CVE-2021-46656 | HIGH | 7.8 | 2.1% | Feb 18, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7... |
| CVE-2021-46655 | HIGH | 7.8 | 1.8% | Feb 18, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now