2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-31613 | MEDIUM | 6.5 | 0.6% | Sep 7, 2021 | The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of... |
| CVE-2021-28155 | MEDIUM | 6.5 | 0.4% | Sep 7, 2021 | The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsol... |
| CVE-2021-28136 | MEDIUM | 6.5 | 0.8% | Sep 7, 2021 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of mult... |
| CVE-2021-28135 | MEDIUM | 6.5 | 0.8% | Sep 7, 2021 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of cont... |
| CVE-2021-33483 | MEDIUM | 5.4 | 0.6% | Sep 7, 2021 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows ... |
| CVE-2021-40530 | MEDIUM | 5.9 | 1.1% | Sep 6, 2021 | The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cry... |
| CVE-2021-40529 | MEDIUM | 5.9 | 1.5% | Sep 6, 2021 | The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery... |
| CVE-2021-40528 | MEDIUM | 5.9 | 1.3% | Sep 6, 2021 | The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two c... |
| CVE-2021-36096 | MEDIUM | 4.9 | 0.4% | Sep 6, 2021 | Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: O... |
| CVE-2021-36095 | MEDIUM | 5.3 | 0.9% | Sep 6, 2021 | Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS ... |
| CVE-2021-36094 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OT... |
| CVE-2021-36093 | MEDIUM | 5.3 | 1.1% | Sep 6, 2021 | It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue... |
| CVE-2021-3768 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-3767 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-25737 | MEDIUM | 4.8 | 1.3% | Sep 6, 2021 | A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a ... |
| CVE-2021-25735 | MEDIUM | 6.5 | 5.2% | Sep 6, 2021 | A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook... |
| CVE-2021-24611 | MEDIUM | 5.4 | 0.3% | Sep 6, 2021 | The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in th... |
| CVE-2021-24603 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an ... |
| CVE-2021-24601 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, whi... |
| CVE-2021-24599 | MEDIUM | 6.1 | 0.8% | Sep 6, 2021 | The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authenticatio... |
| CVE-2021-24591 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to pe... |
| CVE-2021-24590 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize i... |
| CVE-2021-24588 | MEDIUM | 6.1 | 0.8% | Sep 6, 2021 | The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerabilit... |
| CVE-2021-24568 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The AddToAny Share Buttons WordPress plugin before 1.7.46 does not sanitise its Sharing Header setting when outputting i... |
| CVE-2021-24517 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of i... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now