2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20765 | MEDIUM | 6.1 | 0.8% | Aug 18, 2021 | Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arb... |
| CVE-2021-20764 | MEDIUM | 5.3 | 1.0% | Aug 18, 2021 | Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to a... |
| CVE-2021-20763 | MEDIUM | 4.3 | 0.9% | Aug 18, 2021 | Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated at... |
| CVE-2021-20762 | MEDIUM | 4.3 | 0.8% | Aug 18, 2021 | Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter... |
| CVE-2021-20760 | MEDIUM | 4.3 | 0.8% | Aug 18, 2021 | Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated at... |
| CVE-2021-20759 | MEDIUM | 4.3 | 0.8% | Aug 18, 2021 | Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated ... |
| CVE-2021-20757 | MEDIUM | 4.3 | 0.8% | Aug 18, 2021 | Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated at... |
| CVE-2021-20756 | MEDIUM | 4.3 | 0.9% | Aug 18, 2021 | Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attac... |
| CVE-2021-20755 | MEDIUM | 4.3 | 0.9% | Aug 18, 2021 | Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attack... |
| CVE-2021-20754 | MEDIUM | 4.3 | 0.8% | Aug 18, 2021 | Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attack... |
| CVE-2021-20753 | MEDIUM | 5.4 | 0.6% | Aug 18, 2021 | Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker t... |
| CVE-2021-39268 | MEDIUM | 6.1 | 1.4% | Aug 18, 2021 | Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introd... |
| CVE-2021-39267 | MEDIUM | 6.1 | 2.0% | Aug 18, 2021 | Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introd... |
| CVE-2021-39250 | MEDIUM | 5.4 | 0.8% | Aug 17, 2021 | Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution... |
| CVE-2021-39249 | MEDIUM | 6.1 | 0.8% | Aug 17, 2021 | Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of up... |
| CVE-2021-39248 | MEDIUM | 6.1 | 0.6% | Aug 17, 2021 | Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a di... |
| CVE-2021-39247 | MEDIUM | 6.5 | 0.9% | Aug 17, 2021 | Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to is_last_single_ascii in code1.c, and rs... |
| CVE-2021-38702 | MEDIUM | 6.1 | 6.9% | Aug 17, 2021 | Cyberoam NetGenie C0101B1-20141120-NG11VO devices through 2021-08-14 allow tweb/ft.php?u=[XSS] attacks. |
| CVE-2021-29987 | MEDIUM | 6.5 | 0.9% | Aug 17, 2021 | After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be disp... |
| CVE-2021-29983 | MEDIUM | 6.5 | 0.7% | Aug 17, 2021 | Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause ... |
| CVE-2021-29982 | MEDIUM | 6.5 | 1.1% | Aug 17, 2021 | Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the poten... |
| CVE-2021-39241 | MEDIUM | 5.3 | 1.8% | Aug 17, 2021 | An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HTT... |
| CVE-2021-29313 | MEDIUM | 6.1 | 0.6% | Aug 17, 2021 | Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_... |
| CVE-2021-0642 | MEDIUM | 5.5 | 0.3% | Aug 17, 2021 | In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permis... |
| CVE-2021-0641 | MEDIUM | 5.5 | 0.1% | Aug 17, 2021 | In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now