2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24919 | HIGH | 8.8 | 1.5% | Feb 1, 2022 | The Wicked Folders WordPress plugin before 2.8.10 does not sanitise and escape the folder_id parameter before using it i... |
| CVE-2021-24900 | MEDIUM | 4.8 | 0.7% | Feb 1, 2022 | The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow ... |
| CVE-2021-24868 | MEDIUM | 4.3 | 0.9% | Feb 1, 2022 | The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated... |
| CVE-2021-24814 | CRITICAL | 9.6 | 2.1% | Feb 1, 2022 | The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthent... |
| CVE-2021-24775 | MEDIUM | 5.3 | 1.3% | Feb 1, 2022 | The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to... |
| CVE-2021-24765 | MEDIUM | 6.1 | 1.4% | Feb 1, 2022 | The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before o... |
| CVE-2021-24764 | MEDIUM | 6.1 | 0.8% | Feb 1, 2022 | The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[sessio... |
| CVE-2021-24763 | HIGH | 8.8 | 0.6% | Feb 1, 2022 | The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_s... |
| CVE-2021-24762 | CRITICAL | 9.8 | 86.9% | Feb 1, 2022 | The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using... |
| CVE-2021-24761 | MEDIUM | 6.5 | 0.6% | Feb 1, 2022 | The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not ha... |
| CVE-2021-24707 | MEDIUM | 4.8 | 0.6% | Feb 1, 2022 | The Learning Courses WordPress plugin before 5.0 does not sanitise and escape the Email PDT identity token settings, whi... |
| CVE-2021-24686 | MEDIUM | 4.8 | 0.7% | Feb 1, 2022 | The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in... |
| CVE-2021-24648 | MEDIUM | 6.1 | 0.9% | Feb 1, 2022 | The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before ... |
| CVE-2021-43859 | HIGH | 7.5 | 8.2% | Feb 1, 2022 | XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a ... |
| CVE-2021-41040 | HIGH | 7.5 | 1.4% | Feb 1, 2022 | In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-... |
| CVE-2021-3534 | — | — | — | Feb 1, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-34981. Reason: This candidate is a reservation d... |
| CVE-2021-46669 | HIGH | 7.5 | 2.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is us... |
| CVE-2021-46668 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact ... |
| CVE-2021-46667 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash. |
| CVE-2021-46666 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE c... |
| CVE-2021-46665 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations. |
| CVE-2021-46664 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr. |
| CVE-2021-46663 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements. |
| CVE-2021-46662 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with... |
| CVE-2021-46661 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common t... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now