2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43552 | MEDIUM | 5.5 | 0.2% | Dec 27, 2021 | The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from t... |
| CVE-2021-43550 | MEDIUM | 6.5 | 0.2% | Dec 27, 2021 | The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive... |
| CVE-2021-43548 | MEDIUM | 6.5 | 0.4% | Dec 27, 2021 | Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrect... |
| CVE-2021-35232 | MEDIUM | 6.1 | 0.3% | Dec 27, 2021 | Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with loca... |
| CVE-2021-33017 | HIGH | 8.8 | 0.5% | Dec 27, 2021 | The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the prod... |
| CVE-2021-32993 | HIGH | 8.8 | 0.3% | Dec 27, 2021 | IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographi... |
| CVE-2021-23244 | HIGH | 7.8 | 0.6% | Dec 27, 2021 | ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But s... |
| CVE-2021-21751 | HIGH | 8.1 | 0.8% | Dec 27, 2021 | ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and ba... |
| CVE-2021-21750 | HIGH | 7.8 | 0.3% | Dec 27, 2021 | ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task mod... |
| CVE-2021-43856 | MEDIUM | 5.4 | 0.9% | Dec 27, 2021 | Wiki.js is a wiki app built on Node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through... |
| CVE-2021-43855 | MEDIUM | 5.4 | 0.9% | Dec 27, 2021 | Wiki.js is a wiki app built on node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through... |
| CVE-2021-43845 | CRITICAL | 9.1 | 3.7% | Dec 27, 2021 | PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR messa... |
| CVE-2021-38961 | MEDIUM | 6.1 | 0.6% | Dec 27, 2021 | IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c... |
| CVE-2021-45232 | CRITICAL | 9.8 | 85.9% | Dec 27, 2021 | In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the ... |
| CVE-2021-45339 | HIGH | 7.8 | 0.3% | Dec 27, 2021 | Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "... |
| CVE-2021-45338 | HIGH | 7.8 | 0.4% | Dec 27, 2021 | Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privi... |
| CVE-2021-45337 | HIGH | 8.8 | 0.4% | Dec 27, 2021 | Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with ... |
| CVE-2021-45336 | HIGH | 8.8 | 0.5% | Dec 27, 2021 | Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed co... |
| CVE-2021-45335 | HIGH | 8.8 | 0.4% | Dec 27, 2021 | Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to con... |
| CVE-2021-4173 | HIGH | 7.8 | 1.6% | Dec 27, 2021 | vim is vulnerable to Use After Free |
| CVE-2021-24998 | HIGH | 7.5 | 1.2% | Dec 27, 2021 | The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly gen... |
| CVE-2021-24997 | MEDIUM | 6.5 | 2.8% | Dec 27, 2021 | The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any... |
| CVE-2021-24992 | MEDIUM | 4.8 | 0.6% | Dec 27, 2021 | The Smart Floating / Sticky Buttons WordPress plugin before 2.5.5 does not sanitise and escape some parameter before out... |
| CVE-2021-24988 | MEDIUM | 5.4 | 0.3% | Dec 27, 2021 | The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the Syste... |
| CVE-2021-24984 | MEDIUM | 6.1 | 0.8% | Dec 27, 2021 | The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved paramete... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now