2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24513 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form ... |
| CVE-2021-24435 | MEDIUM | 6.1 | 1.7% | Sep 6, 2021 | The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET par... |
| CVE-2021-23439 | MEDIUM | 6.1 | 0.9% | Sep 5, 2021 | This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name ... |
| CVE-2021-40509 | MEDIUM | 5.4 | 0.9% | Sep 4, 2021 | ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature. |
| CVE-2021-30621 | MEDIUM | 6.5 | 3.3% | Sep 3, 2021 | Chromium: CVE-2021-30621 UI Spoofing in Autofill |
| CVE-2021-30619 | MEDIUM | 6.5 | 3.3% | Sep 3, 2021 | Chromium: CVE-2021-30619 UI Spoofing in Autofill |
| CVE-2021-30617 | MEDIUM | 6.5 | 3.5% | Sep 3, 2021 | Chromium: CVE-2021-30617 Policy bypass in Blink |
| CVE-2021-30615 | MEDIUM | 6.5 | 5.3% | Sep 3, 2021 | Chromium: CVE-2021-30615 Cross-origin data leak in Navigation |
| CVE-2021-39193 | MEDIUM | 5.3 | 1.2% | Sep 3, 2021 | Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a... |
| CVE-2021-40492 | MEDIUM | 6.1 | 2.3% | Sep 3, 2021 | A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary... |
| CVE-2021-39191 | MEDIUM | 6.1 | 1.6% | Sep 3, 2021 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Co... |
| CVE-2021-40491 | MEDIUM | 6.5 | 0.9% | Sep 3, 2021 | The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they... |
| CVE-2021-38642 | MEDIUM | 6.1 | 1.1% | Sep 2, 2021 | Microsoft Edge for iOS Spoofing Vulnerability |
| CVE-2021-38641 | MEDIUM | 6.1 | 1.1% | Sep 2, 2021 | Microsoft Edge for Android Spoofing Vulnerability |
| CVE-2021-36930 | MEDIUM | 5.3 | 0.9% | Sep 2, 2021 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2021-26439 | MEDIUM | 4.6 | 2.5% | Sep 2, 2021 | Microsoft Edge for Android Information Disclosure Vulnerability |
| CVE-2021-26436 | MEDIUM | 6.1 | 2.3% | Sep 2, 2021 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2021-39322 | MEDIUM | 6.1 | 2.2% | Sep 2, 2021 | The Easy Social Icons plugin <= 3.0.8 for WordPress echoes out the raw value of `$_SERVER['PHP_SELF']` in its main file.... |
| CVE-2021-38314 | MEDIUM | 5.3 | 27.6% | Sep 2, 2021 | The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress registered several AJAX actions availabl... |
| CVE-2021-38312 | MEDIUM | 6.5 | 1.3% | Sep 2, 2021 | The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress used an incorrect authorization check in... |
| CVE-2021-28559 | MEDIUM | 5.3 | 1.6% | Sep 2, 2021 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e... |
| CVE-2021-28557 | MEDIUM | 4.3 | 1.7% | Sep 2, 2021 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e... |
| CVE-2021-28555 | MEDIUM | 6.5 | 2.7% | Sep 2, 2021 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e... |
| CVE-2021-27578 | MEDIUM | 6.1 | 3.0% | Sep 2, 2021 | Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scr... |
| CVE-2021-22791 | MEDIUM | 6.5 | 0.8% | Sep 2, 2021 | A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simula... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now