2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33889 | MEDIUM | 6.8 | 0.3% | Jul 2, 2021 | OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data... |
| CVE-2021-32738 | MEDIUM | 6.5 | 0.5% | Jul 2, 2021 | js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The `Utils.readChallengeTx` func... |
| CVE-2021-32737 | MEDIUM | 4.8 | 0.7% | Jul 2, 2021 | Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41... |
| CVE-2021-31874 | MEDIUM | 5.9 | 4.3% | Jul 2, 2021 | Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information a... |
| CVE-2021-32735 | MEDIUM | 5.4 | 0.5% | Jul 2, 2021 | Kirby is a content management system. In Kirby CMS versions 3.5.5 and 3.5.6, the Panel's `ListItem` component (used in t... |
| CVE-2021-36131 | MEDIUM | 4.8 | 0.4% | Jul 2, 2021 | An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within several special pages, a priv... |
| CVE-2021-36130 | MEDIUM | 4.8 | 0.5% | Jul 2, 2021 | An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within several gift-related specia... |
| CVE-2021-36129 | MEDIUM | 4.3 | 0.6% | Jul 2, 2021 | An issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups Action API module does... |
| CVE-2021-36127 | MEDIUM | 4.3 | 0.7% | Jul 2, 2021 | An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalUserRights page provid... |
| CVE-2021-27455 | MEDIUM | 5.5 | 0.7% | Jul 2, 2021 | Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project ... |
| CVE-2021-26920 | MEDIUM | 6.5 | 9.5% | Jul 2, 2021 | In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP In... |
| CVE-2021-32731 | MEDIUM | 5.3 | 1.2% | Jul 1, 2021 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Between (and in... |
| CVE-2021-32730 | MEDIUM | 5.7 | 0.6% | Jul 1, 2021 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A cross-site re... |
| CVE-2021-32729 | MEDIUM | 5.4 | 0.5% | Jul 1, 2021 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability... |
| CVE-2021-28424 | MEDIUM | 5.4 | 1.3% | Jul 1, 2021 | A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated u... |
| CVE-2021-35337 | MEDIUM | 4.3 | 0.8% | Jul 1, 2021 | Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any att... |
| CVE-2021-31813 | MEDIUM | 5.4 | 78.3% | Jul 1, 2021 | Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (... |
| CVE-2021-22344 | MEDIUM | 5.3 | 0.7% | Jul 1, 2021 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma... |
| CVE-2021-22347 | MEDIUM | 5.3 | 0.7% | Jul 1, 2021 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma... |
| CVE-2021-20752 | MEDIUM | 6.1 | 0.8% | Jul 1, 2021 | Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary scr... |
| CVE-2021-36083 | MEDIUM | 5.5 | 0.9% | Jul 1, 2021 | KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE. |
| CVE-2021-28803 | MEDIUM | 5.4 | 0.5% | Jul 1, 2021 | This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004. |
| CVE-2021-22346 | MEDIUM | 5.3 | 0.5% | Jun 30, 2021 | There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabi... |
| CVE-2021-34075 | MEDIUM | 5.9 | 0.9% | Jun 30, 2021 | In Artica Pandora FMS <=754 in the File Manager component, there is sensitive information exposed on the client side whi... |
| CVE-2021-21676 | MEDIUM | 4.3 | 1.4% | Jun 30, 2021 | Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attac... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now