2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36232 | HIGH | 8.8 | 1.1% | Aug 31, 2021 | Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate p... |
| CVE-2021-36231 | HIGH | 8.8 | 2.6% | Aug 31, 2021 | Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attacke... |
| CVE-2021-39135 | HIGH | 7.8 | 0.6% | Aug 31, 2021 | `@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the n... |
| CVE-2021-39134 | HIGH | 7.8 | 0.6% | Aug 31, 2021 | `@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the... |
| CVE-2021-37713 | HIGH | 8.6 | 1.3% | Aug 31, 2021 | The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite ... |
| CVE-2021-37712 | HIGH | 8.6 | 1.8% | Aug 31, 2021 | The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite ... |
| CVE-2021-37701 | HIGH | 8.6 | 3.3% | Aug 31, 2021 | The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite a... |
| CVE-2021-35212 | HIGH | 8.8 | 1.6% | Aug 31, 2021 | An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A bli... |
| CVE-2021-22944 | HIGH | 8 | 0.4% | Aug 31, 2021 | A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role an... |
| CVE-2021-22684 | HIGH | 7.5 | 1.1% | Aug 31, 2021 | Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memo... |
| CVE-2021-35223 | HIGH | 8.8 | 2.9% | Aug 31, 2021 | The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command ... |
| CVE-2021-35213 | HIGH | 8.8 | 3.4% | Aug 31, 2021 | An Improper Access Control Privilege Escalation Vulnerability was discovered in the User Setting of Orion Platform versi... |
| CVE-2021-29907 | HIGH | 8.8 | 1.5% | Aug 31, 2021 | IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary co... |
| CVE-2021-21680 | HIGH | 7.1 | 1.3% | Aug 31, 2021 | Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) ... |
| CVE-2021-21679 | HIGH | 8.8 | 0.7% | Aug 31, 2021 | Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protecti... |
| CVE-2021-21678 | HIGH | 8.8 | 0.8% | Aug 31, 2021 | Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target... |
| CVE-2021-21677 | HIGH | 8.8 | 2.2% | Aug 31, 2021 | Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java obj... |
| CVE-2021-35221 | HIGH | 8.1 | 2.0% | Aug 31, 2021 | Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RC... |
| CVE-2021-39316 | HIGH | 7.5 | 66.5% | Aug 31, 2021 | The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-c... |
| CVE-2021-35220 | HIGH | 7.2 | 2.5% | Aug 31, 2021 | Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution (RCE) from the Alerts Sett... |
| CVE-2021-3749 | HIGH | 7.5 | 8.5% | Aug 31, 2021 | axios is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-34581 | HIGH | 7.5 | 1.0% | Aug 31, 2021 | Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 75... |
| CVE-2021-34578 | HIGH | 8.1 | 1.0% | Aug 31, 2021 | This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by s... |
| CVE-2021-34561 | HIGH | 8.8 | 0.9% | Aug 31, 2021 | In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or ... |
| CVE-2021-33555 | HIGH | 7.5 | 1.2% | Aug 31, 2021 | In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal at... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now