2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37390 | MEDIUM | 6.1 | 0.8% | Aug 10, 2021 | A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social network search feature)... |
| CVE-2021-37389 | MEDIUM | 6.1 | 1.0% | Aug 10, 2021 | Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter. |
| CVE-2021-28846 | MEDIUM | 6.5 | 0.8% | Aug 10, 2021 | A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TE... |
| CVE-2021-21600 | MEDIUM | 6.5 | 0.8% | Aug 10, 2021 | Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized A... |
| CVE-2021-38382 | MEDIUM | 6.5 | 1.2% | Aug 10, 2021 | Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the... |
| CVE-2021-38381 | MEDIUM | 6.5 | 1.2% | Aug 10, 2021 | Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same... |
| CVE-2021-3692 | MEDIUM | 5.3 | 1.7% | Aug 10, 2021 | yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator |
| CVE-2021-37365 | MEDIUM | 6.1 | 0.7% | Aug 10, 2021 | CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel. In bl_categires_hel... |
| CVE-2021-32768 | MEDIUM | 6.1 | 0.7% | Aug 10, 2021 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions failing... |
| CVE-2021-38373 | MEDIUM | 5.3 | 0.5% | Aug 10, 2021 | In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Ser... |
| CVE-2021-38370 | MEDIUM | 5.9 | 1.6% | Aug 10, 2021 | In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS. |
| CVE-2021-36601 | MEDIUM | 6.1 | 0.9% | Aug 10, 2021 | GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settin... |
| CVE-2021-33707 | MEDIUM | 6.1 | 2.0% | Aug 10, 2021 | SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing ... |
| CVE-2021-33706 | MEDIUM | 4.3 | 0.6% | Aug 10, 2021 | Due to improper input validation in InfraBox, logs can be modified by an authenticated user. |
| CVE-2021-33703 | MEDIUM | 6.1 | 1.5% | Aug 10, 2021 | Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode U... |
| CVE-2021-33702 | MEDIUM | 6.1 | 1.5% | Aug 10, 2021 | Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suf... |
| CVE-2021-33699 | MEDIUM | 6.5 | 1.2% | Aug 10, 2021 | Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in ... |
| CVE-2021-22676 | MEDIUM | 6.1 | 0.6% | Aug 10, 2021 | UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to se... |
| CVE-2021-37152 | MEDIUM | 5.4 | 24.4% | Aug 10, 2021 | Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the abili... |
| CVE-2021-29739 | MEDIUM | 4.9 | 1.1% | Aug 10, 2021 | IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is ret... |
| CVE-2021-22674 | MEDIUM | 6.5 | 1.1% | Aug 10, 2021 | The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unautho... |
| CVE-2021-31655 | MEDIUM | 6.1 | 1.0% | Aug 10, 2021 | Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter.... |
| CVE-2021-37178 | MEDIUM | 5.5 | 0.9% | Aug 10, 2021 | A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vu... |
| CVE-2021-33717 | MEDIUM | 5.5 | 0.8% | Aug 10, 2021 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (All versions < V13.2.... |
| CVE-2021-21584 | MEDIUM | 6.5 | 0.8% | Aug 9, 2021 | Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosu... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now