2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32598 | MEDIUM | 4.3 | 0.8% | Aug 5, 2021 | An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager a... |
| CVE-2021-3539 | MEDIUM | 5.4 | 0.5% | Aug 4, 2021 | EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-... |
| CVE-2021-36805 | MEDIUM | 4.8 | 0.6% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the... |
| CVE-2021-36803 | MEDIUM | 5.4 | 0.6% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in pro... |
| CVE-2021-36802 | MEDIUM | 6.5 | 0.9% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'lo... |
| CVE-2021-38115 | MEDIUM | 6.5 | 1.9% | Aug 4, 2021 | read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a deni... |
| CVE-2021-38114 | MEDIUM | 5.5 | 1.0% | Aug 4, 2021 | libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-201... |
| CVE-2021-38113 | MEDIUM | 5.4 | 0.5% | Aug 4, 2021 | In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bo... |
| CVE-2021-24014 | MEDIUM | 6.1 | 0.6% | Aug 4, 2021 | Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before... |
| CVE-2021-34707 | MEDIUM | 6.5 | 1.1% | Aug 4, 2021 | A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remot... |
| CVE-2021-32793 | MEDIUM | 4.8 | 0.8% | Aug 4, 2021 | Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prio... |
| CVE-2021-1522 | MEDIUM | 4.3 | 0.7% | Aug 4, 2021 | A vulnerability in the change password API of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, rem... |
| CVE-2021-36168 | MEDIUM | 6.5 | 1.1% | Aug 4, 2021 | A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0.... |
| CVE-2021-24010 | MEDIUM | 6.5 | 0.9% | Aug 4, 2021 | Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1... |
| CVE-2021-3678 | MEDIUM | 5.9 | 1.1% | Aug 4, 2021 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) |
| CVE-2021-35463 | MEDIUM | 6.1 | 0.8% | Aug 4, 2021 | Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers t... |
| CVE-2021-33337 | MEDIUM | 6.1 | 0.8% | Aug 4, 2021 | Cross-site scripting (XSS) vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 thro... |
| CVE-2021-3680 | MEDIUM | 4.9 | 0.5% | Aug 4, 2021 | showdoc is vulnerable to Missing Cryptographic Step |
| CVE-2021-33339 | MEDIUM | 4.8 | 0.7% | Aug 4, 2021 | Cross-site scripting (XSS) vulnerability in the Fragment module in Liferay Portal 7.2.1 through 7.3.4, and Liferay DXP 7... |
| CVE-2021-33336 | MEDIUM | 5.4 | 0.7% | Aug 4, 2021 | Cross-site scripting (XSS) vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3,... |
| CVE-2021-37231 | MEDIUM | 5.5 | 1.0% | Aug 4, 2021 | A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsi... |
| CVE-2021-33334 | MEDIUM | 4.3 | 0.9% | Aug 3, 2021 | The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 befor... |
| CVE-2021-33333 | MEDIUM | 6.3 | 0.9% | Aug 3, 2021 | The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix p... |
| CVE-2021-33332 | MEDIUM | 6.1 | 0.8% | Aug 3, 2021 | Cross-site scripting (XSS) vulnerability in the Portlet Configuration module in Liferay Portal 7.1.0 through 7.3.2, and ... |
| CVE-2021-33331 | MEDIUM | 6.1 | 1.0% | Aug 3, 2021 | Open redirect vulnerability in the Notifications module in Liferay Portal 7.0.0 through 7.3.1, and Liferay DXP 7.0 befor... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now