2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-44793 | HIGH | 8.6 | 1.4% | Jan 27, 2022 | Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exp... |
| CVE-2021-44792 | MEDIUM | 5.3 | 1.0% | Jan 27, 2022 | Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could expl... |
| CVE-2021-44121 | — | — | — | Jan 27, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-41166 | MEDIUM | 5.3 | 0.9% | Jan 26, 2022 | The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions... |
| CVE-2021-32849 | HIGH | 8.8 | 7.6% | Jan 26, 2022 | Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitr... |
| CVE-2021-32841 | MEDIUM | 5.3 | 1.1% | Jan 26, 2022 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a che... |
| CVE-2021-32842 | MEDIUM | 5.3 | 0.9% | Jan 26, 2022 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a che... |
| CVE-2021-32840 | CRITICAL | 9.8 | 2.0% | Jan 26, 2022 | SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` m... |
| CVE-2021-46385 | HIGH | 7.5 | 1.5% | Jan 26, 2022 | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information ... |
| CVE-2021-46114 | HIGH | 8.8 | 1.7% | Jan 26, 2022 | jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides ... |
| CVE-2021-46561 | HIGH | 7.2 | 0.8% | Jan 26, 2022 | controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb53830... |
| CVE-2021-29846 | LOW | 2.7 | 0.6% | Jan 26, 2022 | IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient... |
| CVE-2021-29845 | HIGH | 8.8 | 0.8% | Jan 26, 2022 | IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper inp... |
| CVE-2021-29838 | MEDIUM | 5.9 | 1.3% | Jan 26, 2022 | IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure ... |
| CVE-2021-46386 | CRITICAL | 9.8 | 3.1% | Jan 26, 2022 | File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafte... |
| CVE-2021-46383 | HIGH | 7.5 | 1.6% | Jan 26, 2022 | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information ... |
| CVE-2021-46118 | HIGH | 7.2 | 2.8% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The a... |
| CVE-2021-46116 | HIGH | 7.2 | 2.5% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController#doInstall. The admin pan... |
| CVE-2021-46115 | HIGH | 7.2 | 1.3% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a f... |
| CVE-2021-46117 | HIGH | 7.2 | 3.3% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel... |
| CVE-2021-44692 | MEDIUM | 5.3 | 1.1% | Jan 26, 2022 | BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new u... |
| CVE-2021-43334 | MEDIUM | 5.4 | 0.6% | Jan 26, 2022 | BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field. |
| CVE-2021-45975 | HIGH | 7.8 | 0.6% | Jan 26, 2022 | In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs coul... |
| CVE-2021-22600 | HIGH | 7 | 5.9% | Jan 26, 2022 | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscal... |
| CVE-2021-22570 | MEDIUM | 5.5 | 2.7% | Jan 26, 2022 | Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unche... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now