2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-24980MEDIUM6.1The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter befor...
CVE-2021-24979MEDIUM6.1The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an a...
CVE-2021-24969MEDIUM5.4The WordPress Download Manager WordPress plugin before 3.2.22 does not sanitise and escape Template data before outputti...
CVE-2021-24967MEDIUM6.1The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead valu...
CVE-2021-24902MEDIUM4.8The Typebot | Build beautiful conversational forms WordPress plugin before 1.4.3 does not sanitise and escape the Publis...
CVE-2021-24797MEDIUM6.1The Tickera WordPress plugin before 3.4.8.3 does not properly sanitise and escape the Name fields of booked Events befor...
CVE-2021-24753HIGH7.2The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the p...
CVE-2021-45711HIGH7.5An issue was discovered in the simple_asn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied...
CVE-2021-45710HIGH8.1An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain ci...
CVE-2021-45709CRITICAL9.8An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an ...
CVE-2021-45708HIGH7.5An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insuffici...
CVE-2021-45707CRITICAL9.8An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 ...
CVE-2021-45706CRITICAL9.8An issue was discovered in the zeroize_derive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum.
CVE-2021-45705CRITICAL9.8An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the sam...
CVE-2021-45704HIGH8.1An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption beca...
CVE-2021-45703CRITICAL9.8An issue was discovered in the tectonic_xdv crate before 0.1.12 for Rust. XdvParser::<T>::process may read from uninitia...
CVE-2021-45702HIGH7.5An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-f...
CVE-2021-45701CRITICAL9.8An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-f...
CVE-2021-45700HIGH7.5An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blo...
CVE-2021-45699HIGH7.5An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack ag...
CVE-2021-45698CRITICAL9.8An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations wh...
CVE-2021-45697CRITICAL9.8An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result.
CVE-2021-45696CRITICAL9.8An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the...
CVE-2021-45695CRITICAL9.8An issue was discovered in the mopa crate through 2021-06-01 for Rust. It incorrectly relies on Trait memory layout, pos...
CVE-2021-45694HIGH7.5An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locati...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now