2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40330 | HIGH | 7.5 | 3.2% | Aug 31, 2021 | git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may res... |
| CVE-2021-36981 | HIGH | 8.8 | 6.0% | Aug 31, 2021 | In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to e... |
| CVE-2021-27556 | HIGH | 7.2 | 4.0% | Aug 31, 2021 | The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by ... |
| CVE-2021-32831 | HIGH | 7.2 | 1.5% | Aug 30, 2021 | Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP'... |
| CVE-2021-39132 | HIGH | 8.8 | 1.4% | Aug 30, 2021 | Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.1... |
| CVE-2021-36691 | HIGH | 7.5 | 1.1% | Aug 30, 2021 | libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a m... |
| CVE-2021-35062 | HIGH | 8.1 | 1.5% | Aug 30, 2021 | A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attac... |
| CVE-2021-38342 | HIGH | 8.1 | 0.5% | Aug 30, 2021 | The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `np... |
| CVE-2021-36370 | HIGH | 7.5 | 2.2% | Aug 30, 2021 | An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of t... |
| CVE-2021-29630 | HIGH | 8.1 | 1.6% | Aug 30, 2021 | In FreeBSD 13.0-STABLE before n246938-0729ba2f49c9, 12.2-STABLE before r370383, 11.4-STABLE before r370381, 13.0-RELEASE... |
| CVE-2021-33019 | HIGH | 7.8 | 2.4% | Aug 30, 2021 | A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by p... |
| CVE-2021-33007 | HIGH | 7.8 | 1.1% | Aug 30, 2021 | A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a speciall... |
| CVE-2021-29631 | HIGH | 7.8 | 0.3% | Aug 30, 2021 | In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE before r370399, 13.0-RELEASE... |
| CVE-2021-27020 | HIGH | 8.8 | 1.1% | Aug 30, 2021 | Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export. |
| CVE-2021-27018 | HIGH | 7.5 | 0.5% | Aug 30, 2021 | The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed b... |
| CVE-2021-22027 | HIGH | 7.5 | 1.2% | Aug 30, 2021 | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauth... |
| CVE-2021-22026 | HIGH | 7.5 | 1.1% | Aug 30, 2021 | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauth... |
| CVE-2021-22025 | HIGH | 7.5 | 0.8% | Aug 30, 2021 | The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthe... |
| CVE-2021-22024 | HIGH | 7.5 | 1.0% | Aug 30, 2021 | The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthentic... |
| CVE-2021-22023 | HIGH | 7.2 | 1.0% | Aug 30, 2021 | The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor wi... |
| CVE-2021-29723 | HIGH | 7.5 | 0.9% | Aug 30, 2021 | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that cou... |
| CVE-2021-29722 | HIGH | 7.5 | 0.9% | Aug 30, 2021 | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that cou... |
| CVE-2021-37911 | HIGH | 8.8 | 0.6% | Aug 30, 2021 | The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attacke... |
| CVE-2021-24581 | HIGH | 8.8 | 4.1% | Aug 30, 2021 | The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting ... |
| CVE-2021-24580 | HIGH | 8.8 | 1.4% | Aug 30, 2021 | The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now