2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36717 | HIGH | 7.5 | 0.9% | Sep 7, 2021 | Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker ... |
| CVE-2021-36162 | HIGH | 8.8 | 2.0% | Sep 7, 2021 | Apache Dubbo supports various rules to support configuration override or traffic routing (called routing in Dubbo). Thes... |
| CVE-2021-28139 | HIGH | 8.8 | 1.3% | Sep 7, 2021 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page up... |
| CVE-2021-39279 | HIGH | 8.8 | 4.6% | Sep 7, 2021 | Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-100... |
| CVE-2021-38841 | HIGH | 8.8 | 3.8% | Sep 7, 2021 | Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on th... |
| CVE-2021-33484 | HIGH | 7.5 | 0.9% | Sep 7, 2021 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the in... |
| CVE-2021-24006 | HIGH | 8.8 | 0.9% | Sep 6, 2021 | An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker wit... |
| CVE-2021-3770 | HIGH | 7.8 | 0.7% | Sep 6, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-36744 | HIGH | 7.8 | 0.5% | Sep 6, 2021 | Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an ... |
| CVE-2021-32568 | HIGH | 7.8 | 0.8% | Sep 6, 2021 | mrdoc is vulnerable to Deserialization of Untrusted Data |
| CVE-2021-24395 | HIGH | 7.2 | 1.5% | Sep 6, 2021 | The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated ... |
| CVE-2021-24394 | HIGH | 7.2 | 1.5% | Sep 6, 2021 | An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validate... |
| CVE-2021-24393 | HIGH | 7.2 | 1.5% | Sep 6, 2021 | A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validat... |
| CVE-2021-24392 | HIGH | 7.2 | 1.5% | Sep 6, 2021 | An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, es... |
| CVE-2021-24391 | HIGH | 8.8 | 1.5% | Sep 6, 2021 | An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated ... |
| CVE-2021-24390 | HIGH | 7.2 | 1.5% | Sep 6, 2021 | A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, ... |
| CVE-2021-24303 | HIGH | 8.8 | 1.6% | Sep 6, 2021 | The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET paramete... |
| CVE-2021-40524 | HIGH | 7.5 | 4.4% | Sep 5, 2021 | In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of ... |
| CVE-2021-40523 | HIGH | 7.5 | 0.9% | Sep 5, 2021 | In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server ma... |
| CVE-2021-40516 | HIGH | 7.5 | 1.5% | Sep 5, 2021 | WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that tri... |
| CVE-2021-30624 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30624 Use after free in Autofill |
| CVE-2021-30623 | HIGH | 8.8 | 3.8% | Sep 3, 2021 | Chromium: CVE-2021-30623 Use after free in Bookmarks |
| CVE-2021-30622 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30622 Use after free in WebApp Installs |
| CVE-2021-30620 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
| CVE-2021-30618 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now