2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28382 | MEDIUM | 5.4 | 1.2% | Jun 7, 2021 | Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious u... |
| CVE-2021-33881 | MEDIUM | 4.2 | 0.4% | Jun 6, 2021 | On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) o... |
| CVE-2021-33880 | MEDIUM | 5.9 | 2.3% | Jun 6, 2021 | The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic A... |
| CVE-2021-32641 | MEDIUM | 6.1 | 1.5% | Jun 4, 2021 | auth0-lock is Auth0's signin solution. Versions of nauth0-lock before and including `11.30.0` are vulnerable to reflecte... |
| CVE-2021-31252 | MEDIUM | 6.1 | 28.6% | Jun 4, 2021 | An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices f... |
| CVE-2021-31250 | MEDIUM | 5.4 | 79.6% | Jun 4, 2021 | Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU T... |
| CVE-2021-31249 | MEDIUM | 6.5 | 18.0% | Jun 4, 2021 | A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology I... |
| CVE-2021-26928 | MEDIUM | 6.8 | 1.0% | Jun 4, 2021 | BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products th... |
| CVE-2021-1564 | MEDIUM | 6.5 | 0.4% | Jun 4, 2021 | Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) ... |
| CVE-2021-1563 | MEDIUM | 6.5 | 0.4% | Jun 4, 2021 | Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) ... |
| CVE-2021-1544 | MEDIUM | 5.5 | 0.2% | Jun 4, 2021 | A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an authenticated, local attack... |
| CVE-2021-1537 | MEDIUM | 5.5 | 0.2% | Jun 4, 2021 | A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker ... |
| CVE-2021-1527 | MEDIUM | 6.1 | 0.6% | Jun 4, 2021 | A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to te... |
| CVE-2021-1525 | MEDIUM | 6.1 | 0.8% | Jun 4, 2021 | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker ... |
| CVE-2021-1517 | MEDIUM | 4.3 | 0.8% | Jun 4, 2021 | A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an ... |
| CVE-2021-3565 | MEDIUM | 5.9 | 1.3% | Jun 4, 2021 | A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner... |
| CVE-2021-26994 | MEDIUM | 6.5 | 0.8% | Jun 4, 2021 | Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single work... |
| CVE-2021-32666 | MEDIUM | 6.5 | 0.9% | Jun 3, 2021 | wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulner... |
| CVE-2021-32662 | MEDIUM | 6.5 | 1.3% | Jun 3, 2021 | Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Ba... |
| CVE-2021-32665 | MEDIUM | 6.5 | 0.5% | Jun 3, 2021 | wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug... |
| CVE-2021-3469 | MEDIUM | 5.4 | 0.3% | Jun 3, 2021 | Foreman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling flaw. An authenticated ... |
| CVE-2021-22337 | MEDIUM | 5.3 | 0.7% | Jun 3, 2021 | There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may... |
| CVE-2021-22325 | MEDIUM | 5.3 | 0.4% | Jun 3, 2021 | There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may... |
| CVE-2021-22316 | MEDIUM | 6.8 | 0.2% | Jun 3, 2021 | There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical acce... |
| CVE-2021-3569 | MEDIUM | 5.5 | 0.3% | Jun 3, 2021 | A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. T... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now