2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-24436MEDIUM6.1The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulne...
CVE-2021-36772MEDIUM6.1Zoho ManageEngine ADManager Plus before 7110 allows stored XSS.
CVE-2021-36771MEDIUM6.1Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS.
CVE-2021-36769MEDIUM5.3A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop befo...
CVE-2021-3614MEDIUM6.8A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevat...
CVE-2021-3453MEDIUM4.6Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could ...
CVE-2021-3452MEDIUM6.7A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker wit...
CVE-2021-34466MEDIUM5.7Windows Hello Security Feature Bypass Vulnerability
CVE-2021-34457MEDIUM5.5Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-34454MEDIUM5.5Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-34451MEDIUM5.3Microsoft Office Online Server Spoofing Vulnerability
CVE-2021-34448MEDIUM6.8Scripting Engine Memory Corruption Vulnerability
CVE-2021-34447MEDIUM6.8Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-34444MEDIUM6.5Windows DNS Server Denial of Service Vulnerability
CVE-2021-34440MEDIUM5.5GDI+ Information Disclosure Vulnerability
CVE-2021-28054MEDIUM5.4An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Conf...
CVE-2021-28114MEDIUM5.4Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
CVE-2021-3647MEDIUM6.1URI.js is vulnerable to URL Redirection to Untrusted Site
CVE-2021-21816MEDIUM4.3An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially craft...
CVE-2021-21803MEDIUM6.1This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application...
CVE-2021-21802MEDIUM6.1This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application...
CVE-2021-21801MEDIUM6.1This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application...
CVE-2021-21800MEDIUM6.1Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.1...
CVE-2021-21799MEDIUM6.1Cross-site scripting vulnerabilities exist in the telnet_form.php script functionality of Advantech R-SeeNet v 2.4.12 (2...
CVE-2021-36758MEDIUM5.41Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access t...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now