2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23631 | HIGH | 7.5 | 2.0% | Jan 21, 2022 | This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of packa... |
| CVE-2021-23518 | CRITICAL | 9.8 | 1.9% | Jan 21, 2022 | The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set a... |
| CVE-2021-23460 | HIGH | 7.5 | 2.3% | Jan 21, 2022 | The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of... |
| CVE-2021-4032 | MEDIUM | 4.4 | 0.4% | Jan 21, 2022 | A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allo... |
| CVE-2021-4001 | MEDIUM | 4.1 | 0.2% | Jan 21, 2022 | A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a m... |
| CVE-2021-44593 | HIGH | 8.1 | 4.2% | Jan 21, 2022 | Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL inje... |
| CVE-2021-44464 | HIGH | 8.8 | 0.6% | Jan 21, 2022 | Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across al... |
| CVE-2021-43355 | CRITICAL | 9.8 | 1.0% | Jan 21, 2022 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the cl... |
| CVE-2021-41835 | HIGH | 7.5 | 0.3% | Jan 21, 2022 | Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be... |
| CVE-2021-40247 | CRITICAL | 9.8 | 2.6% | Jan 21, 2022 | SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to exe... |
| CVE-2021-33966 | MEDIUM | 5.4 | 0.9% | Jan 21, 2022 | Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via ... |
| CVE-2021-33848 | MEDIUM | 6.1 | 0.6% | Jan 21, 2022 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scrip... |
| CVE-2021-33846 | HIGH | 7.2 | 0.3% | Jan 21, 2022 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticat... |
| CVE-2021-33843 | MEDIUM | 5.3 | 0.8% | Jan 21, 2022 | Fresenius Kabi Agilia SP MC WiFi vD25 and prior has a default configuration page accessible without authentication. An a... |
| CVE-2021-31562 | CRITICAL | 9.1 | 0.5% | Jan 21, 2022 | The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacke... |
| CVE-2021-23236 | HIGH | 7.5 | 1.1% | Jan 21, 2022 | Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ versio... |
| CVE-2021-23233 | CRITICAL | 9.8 | 0.9% | Jan 21, 2022 | Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information... |
| CVE-2021-23207 | MEDIUM | 5.5 | 0.2% | Jan 21, 2022 | An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for t... |
| CVE-2021-23196 | CRITICAL | 9.8 | 0.9% | Jan 21, 2022 | The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively ... |
| CVE-2021-23195 | MEDIUM | 5.3 | 0.8% | Jan 21, 2022 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (dire... |
| CVE-2021-4016 | LOW | 3.3 | 0.2% | Jan 21, 2022 | Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user ha... |
| CVE-2021-46309 | CRITICAL | 9.8 | 1.6% | Jan 21, 2022 | An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the userna... |
| CVE-2021-46308 | CRITICAL | 9.8 | 1.6% | Jan 21, 2022 | An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter. |
| CVE-2021-46307 | CRITICAL | 9.8 | 1.6% | Jan 21, 2022 | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.ph... |
| CVE-2021-46201 | CRITICAL | 9.8 | 1.6% | Jan 21, 2022 | An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /or... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now