2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32518 | HIGH | 7.5 | 1.7% | Jul 7, 2021 | A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbi... |
| CVE-2021-32517 | HIGH | 7.5 | 1.3% | Jul 7, 2021 | Improper access control vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrar... |
| CVE-2021-32516 | HIGH | 7.5 | 1.7% | Jul 7, 2021 | Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. ... |
| CVE-2021-32514 | HIGH | 7.5 | 1.2% | Jul 7, 2021 | Improper access control vulnerability in FirmwareUpgrade in QSAN Storage Manager allows remote attackers to reboot and d... |
| CVE-2021-26274 | HIGH | 7.1 | 0.4% | Jul 7, 2021 | The Agent in NinjaRMM 5.0.909 has Insecure Permissions. |
| CVE-2021-26273 | HIGH | 7.8 | 0.4% | Jul 7, 2021 | The Agent in NinjaRMM 5.0.909 has Incorrect Access Control. |
| CVE-2021-34622 | HIGH | 8.8 | 4.1% | Jul 7, 2021 | A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfileP... |
| CVE-2021-34620 | HIGH | 8.8 | 2.6% | Jul 7, 2021 | The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Si... |
| CVE-2021-22555 | HIGH | 7.8 | 78.7% | Jul 7, 2021 | A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an ... |
| CVE-2021-26038 | HIGH | 7.5 | 1.2% | Jul 7, 2021 | An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in com_installer lack the required hardcoded ACL... |
| CVE-2021-26036 | HIGH | 7.5 | 1.4% | Jul 7, 2021 | An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups t... |
| CVE-2021-22230 | HIGH | 7.2 | 1.0% | Jul 7, 2021 | Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability a... |
| CVE-2021-20780 | HIGH | 8.8 | 0.9% | Jul 7, 2021 | Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote at... |
| CVE-2021-20779 | HIGH | 8.8 | 0.9% | Jul 7, 2021 | Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.... |
| CVE-2021-20739 | HIGH | 8.8 | 0.5% | Jul 7, 2021 | WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, a... |
| CVE-2021-35039 | HIGH | 7.8 | 0.2% | Jul 7, 2021 | kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONF... |
| CVE-2021-22229 | HIGH | 7.5 | 1.1% | Jul 6, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was... |
| CVE-2021-32740 | HIGH | 7.5 | 2.2% | Jul 6, 2021 | Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncon... |
| CVE-2021-24451 | HIGH | 7.2 | 1.4% | Jul 6, 2021 | The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in... |
| CVE-2021-24005 | HIGH | 7.5 | 0.6% | Jul 6, 2021 | Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions befo... |
| CVE-2021-35331 | HIGH | 7.8 | 1.6% | Jul 5, 2021 | In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple... |
| CVE-2021-36148 | HIGH | 7.8 | 0.7% | Jul 2, 2021 | An issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an irte_alloc_bitmap buff... |
| CVE-2021-36147 | HIGH | 7.5 | 1.0% | Jul 2, 2021 | An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL ... |
| CVE-2021-36146 | HIGH | 7.5 | 1.2% | Jul 2, 2021 | ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer. |
| CVE-2021-36145 | HIGH | 7.5 | 1.0% | Jul 2, 2021 | The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now