2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25022 | MEDIUM | 6.1 | 1.1% | Jan 3, 2022 | The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestam... |
| CVE-2021-25021 | MEDIUM | 4.9 | 1.0% | Jan 3, 2022 | The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allow... |
| CVE-2021-25020 | MEDIUM | 4.9 | 1.0% | Jan 3, 2022 | The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, al... |
| CVE-2021-25016 | MEDIUM | 6.1 | 1.8% | Jan 3, 2022 | The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the searc... |
| CVE-2021-25001 | MEDIUM | 6.1 | 0.8% | Jan 3, 2022 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_resul... |
| CVE-2021-25000 | MEDIUM | 6.1 | 0.8% | Jan 3, 2022 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter bef... |
| CVE-2021-24999 | MEDIUM | 6.1 | 0.8% | Jan 3, 2022 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before o... |
| CVE-2021-24991 | MEDIUM | 4.8 | 1.2% | Jan 3, 2022 | The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section paramete... |
| CVE-2021-24973 | MEDIUM | 6.1 | 1.3% | Jan 3, 2022 | The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_acti... |
| CVE-2021-24964 | MEDIUM | 6.1 | 1.2% | Jan 3, 2022 | The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud serv... |
| CVE-2021-24963 | MEDIUM | 4.8 | 0.7% | Jan 3, 2022 | The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the ... |
| CVE-2021-24893 | HIGH | 7.5 | 1.6% | Jan 3, 2022 | The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integ... |
| CVE-2021-24831 | HIGH | 7.5 | 1.2% | Jan 3, 2022 | All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users,... |
| CVE-2021-24828 | MEDIUM | 5.4 | 0.6% | Jan 3, 2022 | The Mortgage Calculator / Loan Calculator WordPress plugin before 1.5.17 does not escape the some of the attributes of i... |
| CVE-2021-24786 | HIGH | 7.2 | 17.5% | Jan 3, 2022 | The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter bef... |
| CVE-2021-24680 | MEDIUM | 5.4 | 0.6% | Jan 3, 2022 | The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activit... |
| CVE-2021-45917 | CRITICAL | 9 | 0.5% | Jan 3, 2022 | The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated ... |
| CVE-2021-45916 | LOW | 3.5 | 0.3% | Jan 3, 2022 | The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker w... |
| CVE-2021-44158 | HIGH | 8 | 0.7% | Jan 3, 2022 | ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter l... |
| CVE-2021-35093 | MEDIUM | 6.5 | 0.2% | Jan 3, 2022 | Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial... |
| CVE-2021-30351 | CRITICAL | 9.8 | 4.0% | Jan 3, 2022 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playbac... |
| CVE-2021-30348 | MEDIUM | 6.5 | 0.2% | Jan 3, 2022 | Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Comp... |
| CVE-2021-30337 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in... |
| CVE-2021-30336 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdrag... |
| CVE-2021-30335 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneo... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now