2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24483 | HIGH | 7.2 | 1.4% | Aug 2, 2021 | The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did n... |
| CVE-2021-24463 | HIGH | 8.8 | 1.4% | Aug 2, 2021 | The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did ... |
| CVE-2021-24462 | HIGH | 8.8 | 1.4% | Aug 2, 2021 | The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPr... |
| CVE-2021-24461 | HIGH | 8.8 | 1.4% | Aug 2, 2021 | The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the order... |
| CVE-2021-24460 | HIGH | 8.8 | 1.4% | Aug 2, 2021 | The get_fb_likeboxes() function in the Popup Like box – Page Plugin WordPress plugin before 3.5.3 did not use whitelist ... |
| CVE-2021-24459 | HIGH | 8.8 | 1.4% | Aug 2, 2021 | The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or v... |
| CVE-2021-24458 | HIGH | 8.8 | 1.4% | Aug 2, 2021 | The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use... |
| CVE-2021-24457 | HIGH | 8.8 | 1.4% | Aug 2, 2021 | The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php a... |
| CVE-2021-24456 | HIGH | 7.2 | 1.3% | Aug 2, 2021 | The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters bef... |
| CVE-2021-24430 | HIGH | 7.2 | 1.7% | Aug 2, 2021 | The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude... |
| CVE-2021-32066 | HIGH | 7.4 | 2.9% | Aug 1, 2021 | An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an e... |
| CVE-2021-32807 | HIGH | 7.2 | 2.0% | Jul 30, 2021 | The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. R... |
| CVE-2021-27495 | HIGH | 7.1 | 0.8% | Jul 30, 2021 | Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All ... |
| CVE-2021-27491 | HIGH | 7.5 | 1.1% | Jul 30, 2021 | Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All ... |
| CVE-2021-35193 | HIGH | 7.5 | 1.2% | Jul 30, 2021 | Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across di... |
| CVE-2021-37601 | HIGH | 7.5 | 2.3% | Jul 30, 2021 | muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, me... |
| CVE-2021-36983 | HIGH | 7.8 | 0.5% | Jul 30, 2021 | replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/... |
| CVE-2021-36766 | HIGH | 7.2 | 3.7% | Jul 30, 2021 | Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/d... |
| CVE-2021-36754 | HIGH | 7.5 | 64.9% | Jul 30, 2021 | PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE ... |
| CVE-2021-36621 | HIGH | 8.1 | 2.1% | Jul 30, 2021 | Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is v... |
| CVE-2021-36386 | HIGH | 7.5 | 2.6% | Jul 30, 2021 | report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, w... |
| CVE-2021-36004 | HIGH | 8.8 | 2.2% | Jul 30, 2021 | Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. A... |
| CVE-2021-35472 | HIGH | 8.8 | 1.7% | Jul 30, 2021 | An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spo... |
| CVE-2021-34802 | HIGH | 8.8 | 1.0% | Jul 30, 2021 | A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow ... |
| CVE-2021-32610 | HIGH | 7.1 | 73.4% | Jul 30, 2021 | In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now