2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39219 | MEDIUM | 6.3 | 0.3% | Sep 17, 2021 | Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusio... |
| CVE-2021-39216 | MEDIUM | 6.3 | 0.3% | Sep 17, 2021 | Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 the... |
| CVE-2021-31842 | MEDIUM | 5.5 | 0.2% | Sep 17, 2021 | XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 202... |
| CVE-2021-39327 | MEDIUM | 5.3 | 72.3% | Sep 17, 2021 | The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosur... |
| CVE-2021-3812 | MEDIUM | 6.1 | 0.5% | Sep 17, 2021 | adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-3811 | MEDIUM | 6.1 | 0.5% | Sep 17, 2021 | adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-1939 | MEDIUM | 5.5 | 0.1% | Sep 17, 2021 | Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdrag... |
| CVE-2021-20828 | MEDIUM | 6.1 | 0.7% | Sep 17, 2021 | Cross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) all versions allows a r... |
| CVE-2021-20825 | MEDIUM | 6.1 | 0.7% | Sep 17, 2021 | Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and e... |
| CVE-2021-29842 | MEDIUM | 5.3 | 1.3% | Sep 16, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to e... |
| CVE-2021-29763 | MEDIUM | 5.1 | 0.2% | Sep 16, 2021 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could al... |
| CVE-2021-29752 | MEDIUM | 4.4 | 1.0% | Sep 16, 2021 | IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privilege... |
| CVE-2021-39208 | MEDIUM | 4.3 | 1.2% | Sep 16, 2021 | SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 ar... |
| CVE-2021-27340 | MEDIUM | 6.1 | 1.1% | Sep 16, 2021 | OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" pa... |
| CVE-2021-34576 | MEDIUM | 4.3 | 0.4% | Sep 16, 2021 | In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give... |
| CVE-2021-34573 | MEDIUM | 5.5 | 0.2% | Sep 16, 2021 | In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are... |
| CVE-2021-34572 | MEDIUM | 6.5 | 0.2% | Sep 16, 2021 | Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead tim... |
| CVE-2021-34571 | MEDIUM | 6.5 | 0.2% | Sep 16, 2021 | Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the e... |
| CVE-2021-40067 | MEDIUM | 6.8 | 0.6% | Sep 16, 2021 | The access controls on the Mobility read-write API improperly validate user access permissions; this API is disabled by ... |
| CVE-2021-40066 | MEDIUM | 5.3 | 0.6% | Sep 16, 2021 | The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both netwo... |
| CVE-2021-33697 | MEDIUM | 6.1 | 0.6% | Sep 15, 2021 | Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an... |
| CVE-2021-33696 | MEDIUM | 5.4 | 0.5% | Sep 15, 2021 | SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode u... |
| CVE-2021-33694 | MEDIUM | 4.8 | 0.4% | Sep 15, 2021 | SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Admin... |
| CVE-2021-33693 | MEDIUM | 6.8 | 0.5% | Sep 15, 2021 | SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malic... |
| CVE-2021-33691 | MEDIUM | 6.1 | 0.6% | Sep 15, 2021 | NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now