2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21675 | MEDIUM | 6.5 | 1.3% | Jun 30, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers ... |
| CVE-2021-21674 | MEDIUM | 4.3 | 1.0% | Jun 30, 2021 | A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permis... |
| CVE-2021-21673 | MEDIUM | 6.1 | 1.6% | Jun 30, 2021 | Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to J... |
| CVE-2021-21672 | MEDIUM | 4.3 | 42.5% | Jun 30, 2021 | Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XX... |
| CVE-2021-21670 | MEDIUM | 4.3 | 2.0% | Jun 30, 2021 | Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which... |
| CVE-2021-3630 | MEDIUM | 5.5 | 1.1% | Jun 30, 2021 | An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djv... |
| CVE-2021-20461 | MEDIUM | 6.5 | 1.0% | Jun 30, 2021 | IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configura... |
| CVE-2021-20107 | MEDIUM | 5.4 | 0.5% | Jun 30, 2021 | There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and... |
| CVE-2021-35956 | MEDIUM | 5.4 | 3.2% | Jun 30, 2021 | Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote aut... |
| CVE-2021-27902 | MEDIUM | 6.1 | 1.0% | Jun 30, 2021 | An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in conne... |
| CVE-2021-34385 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length co... |
| CVE-2021-34383 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or esc... |
| CVE-2021-34379 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an ... |
| CVE-2021-34378 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restrict... |
| CVE-2021-34377 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restricti... |
| CVE-2021-34376 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restricti... |
| CVE-2021-34375 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might... |
| CVE-2021-34374 | MEDIUM | 6.7 | 0.2% | Jun 30, 2021 | Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerabilit... |
| CVE-2021-34373 | MEDIUM | 6 | 0.3% | Jun 30, 2021 | Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could... |
| CVE-2021-31721 | MEDIUM | 6.1 | 1.2% | Jun 30, 2021 | Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage. |
| CVE-2021-28693 | MEDIUM | 5.5 | 0.3% | Jun 30, 2021 | xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary ... |
| CVE-2021-35959 | MEDIUM | 5.4 | 0.5% | Jun 30, 2021 | In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a fo... |
| CVE-2021-22341 | MEDIUM | 4.9 | 0.6% | Jun 29, 2021 | There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers wi... |
| CVE-2021-22329 | MEDIUM | 4.9 | 0.5% | Jun 29, 2021 | There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform s... |
| CVE-2021-32721 | MEDIUM | 6.1 | 0.6% | Jun 29, 2021 | PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now