2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24694 | MEDIUM | 5.4 | 0.6% | Jan 24, 2022 | The Simple Download Monitor WordPress plugin before 3.9.11 could allow users with a role as low as Contributor to perfor... |
| CVE-2021-24423 | MEDIUM | 4.8 | 0.6% | Jan 24, 2022 | The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, a... |
| CVE-2021-39293 | HIGH | 7.5 | 6.9% | Jan 24, 2022 | In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many fil... |
| CVE-2021-30636 | CRITICAL | 9.8 | 1.5% | Jan 24, 2022 | In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled ... |
| CVE-2021-26706 | CRITICAL | 9.8 | 1.9% | Jan 24, 2022 | An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functio... |
| CVE-2021-46024 | CRITICAL | 9.8 | 1.0% | Jan 23, 2022 | Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in c... |
| CVE-2021-45380 | MEDIUM | 6.1 | 2.5% | Jan 23, 2022 | AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php |
| CVE-2021-4103 | MEDIUM | 5.4 | 0.7% | Jan 23, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34. |
| CVE-2021-4172 | MEDIUM | 5.4 | 0.6% | Jan 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2. |
| CVE-2021-39480 | HIGH | 7.5 | 1.1% | Jan 21, 2022 | Bingrep v0.8.5 was discovered to contain a memory allocation failure which can cause a Denial of Service (DoS). |
| CVE-2021-46313 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned... |
| CVE-2021-46311 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vr... |
| CVE-2021-46244 | MEDIUM | 6.5 | 1.0% | Jan 21, 2022 | A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This ... |
| CVE-2021-46243 | MEDIUM | 6.5 | 1.0% | Jan 21, 2022 | An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at ... |
| CVE-2021-46242 | HIGH | 8.8 | 1.2% | Jan 21, 2022 | HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry. |
| CVE-2021-46240 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager... |
| CVE-2021-46239 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at ... |
| CVE-2021-46238 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegrap... |
| CVE-2021-46237 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegrap... |
| CVE-2021-46236 | MEDIUM | 5.5 | 0.7% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scene... |
| CVE-2021-46234 | MEDIUM | 5.5 | 0.7% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base... |
| CVE-2021-36339 | HIGH | 7.8 | 0.2% | Jan 21, 2022 | The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentiall... |
| CVE-2021-36338 | HIGH | 8 | 0.4% | Jan 21, 2022 | Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious us... |
| CVE-2021-40595 | CRITICAL | 9.8 | 1.4% | Jan 21, 2022 | SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execut... |
| CVE-2021-23664 | HIGH | 7.5 | 1.4% | Jan 21, 2022 | The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now