2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24579 | HIGH | 8.8 | 8.2% | Aug 30, 2021 | The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unseria... |
| CVE-2021-25958 | HIGH | 7.5 | 2.6% | Aug 30, 2021 | In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations ... |
| CVE-2021-39113 | HIGH | 7.5 | 1.8% | Aug 30, 2021 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached c... |
| CVE-2021-39271 | HIGH | 8.8 | 3.7% | Aug 30, 2021 | OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attack... |
| CVE-2021-38385 | HIGH | 7.5 | 1.7% | Aug 30, 2021 | Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-s... |
| CVE-2021-36359 | HIGH | 8.8 | 4.0% | Aug 30, 2021 | OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection beca... |
| CVE-2021-40174 | HIGH | 8.8 | 1.0% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings. |
| CVE-2021-40173 | HIGH | 8.8 | 1.0% | Aug 29, 2021 | Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings. |
| CVE-2021-40172 | HIGH | 8.8 | 1.0% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings. |
| CVE-2021-38154 | HIGH | 7.5 | 4.0% | Aug 29, 2021 | Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server ... |
| CVE-2021-39174 | HIGH | 8.8 | 3.9% | Aug 28, 2021 | Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges... |
| CVE-2021-39173 | HIGH | 8.8 | 2.4% | Aug 27, 2021 | Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges ... |
| CVE-2021-39172 | HIGH | 8.8 | 29.2% | Aug 27, 2021 | Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges... |
| CVE-2021-39171 | HIGH | 7.5 | 1.3% | Aug 27, 2021 | Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Prior to version 3... |
| CVE-2021-32759 | HIGH | 7.2 | 1.3% | Aug 27, 2021 | OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in ve... |
| CVE-2021-3264 | HIGH | 7.2 | 0.9% | Aug 27, 2021 | SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php. |
| CVE-2021-28697 | HIGH | 7.8 | 0.3% | Aug 27, 2021 | grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pa... |
| CVE-2021-28233 | HIGH | 8.8 | 1.1% | Aug 27, 2021 | Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in o... |
| CVE-2021-32758 | HIGH | 7.2 | 2.0% | Aug 27, 2021 | OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layou... |
| CVE-2021-23434 | HIGH | 8.6 | 1.9% | Aug 27, 2021 | This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-1525... |
| CVE-2021-36531 | HIGH | 8.8 | 1.1% | Aug 27, 2021 | ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer with... |
| CVE-2021-36530 | HIGH | 8.8 | 1.1% | Aug 27, 2021 | ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffe... |
| CVE-2021-40153 | HIGH | 8.1 | 2.5% | Aug 27, 2021 | squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by ... |
| CVE-2021-35342 | HIGH | 7.5 | 1.1% | Aug 27, 2021 | The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender E... |
| CVE-2021-40142 | HIGH | 7.5 | 2.6% | Aug 27, 2021 | In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS)... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now