2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-24862HIGH7.2The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action befo...
CVE-2021-23218HIGH7.5When running with FIPS mode enabled, Mirantis Container Runtime 20.10.8 leaks memory during TLS Handshakes which could b...
CVE-2021-23154HIGH7.8In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided argu...
CVE-2021-44586HIGH7.5An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that ...
CVE-2021-46166MEDIUM6.5Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the da...
CVE-2021-46165HIGH7.8Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but...
CVE-2021-46164HIGH8.8Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete...
CVE-2021-46163MEDIUM6.1Kentico Xperience 13.0.44 allows XSS via an XML document to the Media Libraries subsystem.
CVE-2021-46150MEDIUM4.8An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Special:CheckUserLog...
CVE-2021-46149HIGH7.5An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service ...
CVE-2021-46148MEDIUM6.5An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Some unprivileged us...
CVE-2021-46147HIGH8.8An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. MassEditRegex allows...
CVE-2021-46146MEDIUM5.4An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInf...
CVE-2021-46060——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2021-46059——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2021-46058——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2021-46055MEDIUM5.5A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitReth...
CVE-2021-46054MEDIUM5.5A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitReth...
CVE-2021-46053MEDIUM5.5A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL.
CVE-2021-46052MEDIUM5.5A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.
CVE-2021-46051MEDIUM5.5A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Den...
CVE-2021-46050MEDIUM5.5A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.
CVE-2021-46049MEDIUM5.5A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of...
CVE-2021-46048MEDIUM5.5A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunct...
CVE-2021-46047MEDIUM5.5A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now