2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4387 | HIGH | 8.8 | 0.5% | Jul 1, 2023 | The Opal Estate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.1... |
| CVE-2021-31982 | HIGH | 8.8 | 1.3% | Jul 1, 2023 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
| CVE-2021-31937 | HIGH | 8.2 | 0.9% | Jun 28, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2021-4337 | HIGH | 8.8 | 1.3% | Jun 7, 2023 | Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability ... |
| CVE-2021-4382 | HIGH | 8.8 | 1.6% | Jun 7, 2023 | The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fet... |
| CVE-2021-4368 | HIGH | 8.8 | 1.9% | Jun 7, 2023 | The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and inc... |
| CVE-2021-4361 | HIGH | 8.8 | 1.2% | Jun 7, 2023 | The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check ... |
| CVE-2021-4360 | HIGH | 8.8 | 1.2% | Jun 7, 2023 | The Controlled Admin Access plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including,... |
| CVE-2021-4354 | HIGH | 8.8 | 1.8% | Jun 7, 2023 | The PWA for WP & AMP for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pw... |
| CVE-2021-4349 | HIGH | 8.8 | 0.6% | Jun 7, 2023 | The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, ... |
| CVE-2021-4346 | HIGH | 7.5 | 1.2% | Jun 7, 2023 | The uListing plugin for WordPress is vulnerable to Unauthenticated Arbitrary Account Changes in versions up to, and incl... |
| CVE-2021-4340 | HIGH | 7.5 | 1.2% | Jun 7, 2023 | The uListing plugin for WordPress is vulnerable to generic SQL Injection via the ‘listing_id’ parameter in versions up t... |
| CVE-2021-33223 | HIGH | 8.8 | 0.8% | Jun 7, 2023 | An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in th... |
| CVE-2021-31233 | HIGH | 7.5 | 1.1% | May 31, 2023 | SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive... |
| CVE-2021-27825 | HIGH | 7.5 | 7.8% | May 29, 2023 | A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-stati... |
| CVE-2021-46886 | HIGH | 7.5 | 0.4% | May 26, 2023 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma... |
| CVE-2021-46885 | HIGH | 7.5 | 0.4% | May 26, 2023 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma... |
| CVE-2021-46884 | HIGH | 7.5 | 0.4% | May 26, 2023 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma... |
| CVE-2021-46883 | HIGH | 7.5 | 0.4% | May 26, 2023 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma... |
| CVE-2021-46882 | HIGH | 7.5 | 0.4% | May 26, 2023 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma... |
| CVE-2021-46881 | HIGH | 7.5 | 0.4% | May 26, 2023 | The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma... |
| CVE-2021-25749 | HIGH | 7.8 | 0.2% | May 24, 2023 | Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true. |
| CVE-2021-34076 | HIGH | 8.8 | 0.9% | May 11, 2023 | File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges v... |
| CVE-2021-45345 | HIGH | 7.5 | 1.3% | May 10, 2023 | Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service... |
| CVE-2021-46794 | HIGH | 7.5 | 0.6% | May 9, 2023 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now