2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37444 | HIGH | 8.8 | 1.9% | Jul 25, 2021 | NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive.... |
| CVE-2021-37443 | HIGH | 8.1 | 1.2% | Jul 25, 2021 | NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion. |
| CVE-2021-37441 | HIGH | 8.8 | 1.5% | Jul 25, 2021 | NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring. |
| CVE-2021-3663 | HIGH | 7.5 | 0.7% | Jul 25, 2021 | firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts |
| CVE-2021-32783 | HIGH | 8.5 | 1.2% | Jul 23, 2021 | Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted Exter... |
| CVE-2021-25808 | HIGH | 7.8 | 1.2% | Jul 23, 2021 | A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a cr... |
| CVE-2021-25201 | HIGH | 7.5 | 1.5% | Jul 23, 2021 | SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL stateme... |
| CVE-2021-32785 | HIGH | 7.5 | 2.7% | Jul 22, 2021 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Co... |
| CVE-2021-3540 | HIGH | 7.2 | 3.3% | Jul 22, 2021 | By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions... |
| CVE-2021-3198 | HIGH | 7.2 | 3.3% | Jul 22, 2021 | By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivan... |
| CVE-2021-36222 | HIGH | 7.5 | 10.3% | Jul 22, 2021 | ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.... |
| CVE-2021-35063 | HIGH | 7.5 | 2.0% | Jul 22, 2021 | Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." |
| CVE-2021-29657 | HIGH | 7.4 | 0.4% | Jul 22, 2021 | arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass a... |
| CVE-2021-26764 | HIGH | 8.8 | 2.5% | Jul 22, 2021 | SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL s... |
| CVE-2021-26762 | HIGH | 8.8 | 2.3% | Jul 22, 2021 | SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL sta... |
| CVE-2021-1618 | HIGH | 7.2 | 2.7% | Jul 22, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an auth... |
| CVE-2021-1601 | HIGH | 8.3 | 0.4% | Jul 22, 2021 | Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to acce... |
| CVE-2021-1600 | HIGH | 8.3 | 0.4% | Jul 22, 2021 | Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to acce... |
| CVE-2021-1518 | HIGH | 8.8 | 1.9% | Jul 22, 2021 | A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, re... |
| CVE-2021-29143 | HIGH | 7.2 | 2.6% | Jul 22, 2021 | A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch... |
| CVE-2021-22001 | HIGH | 7.5 | 1.0% | Jul 22, 2021 | In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response whe... |
| CVE-2021-30110 | HIGH | 7.5 | 2.0% | Jul 22, 2021 | dttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute a... |
| CVE-2021-30486 | HIGH | 8.8 | 1.0% | Jul 22, 2021 | SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetMa... |
| CVE-2021-22523 | HIGH | 7.6 | 0.8% | Jul 22, 2021 | XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier ... |
| CVE-2021-22522 | HIGH | 7.1 | 0.6% | Jul 22, 2021 | Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Up... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now