2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24316 | MEDIUM | 6.1 | 6.4% | Jun 1, 2021 | The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter bef... |
| CVE-2021-24313 | MEDIUM | 5.4 | 0.7% | Jun 1, 2021 | The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list them ... |
| CVE-2021-24310 | MEDIUM | 4.8 | 1.1% | Jun 1, 2021 | The Photo Gallery by 10Web - Mobile-Friendly Image Gallery WordPress plugin before 1.5.67 did not properly sanitise the ... |
| CVE-2021-24309 | MEDIUM | 5.4 | 0.7% | Jun 1, 2021 | The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize... |
| CVE-2021-23388 | MEDIUM | 5.3 | 1.7% | Jun 1, 2021 | The package forms before 1.2.1, from 1.3.0 and before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDo... |
| CVE-2021-20585 | MEDIUM | 5.3 | 1.0% | Jun 1, 2021 | IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in furth... |
| CVE-2021-20306 | MEDIUM | 4.3 | 0.7% | Jun 1, 2021 | A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the na... |
| CVE-2021-23021 | MEDIUM | 5.5 | 0.2% | Jun 1, 2021 | The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with c... |
| CVE-2021-23020 | MEDIUM | 5.5 | 0.3% | Jun 1, 2021 | The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which co... |
| CVE-2021-25932 | MEDIUM | 5.4 | 0.9% | Jun 1, 2021 | In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation... |
| CVE-2021-32635 | MEDIUM | 6.3 | 1.4% | May 28, 2021 | Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `si... |
| CVE-2021-32616 | MEDIUM | 6.1 | 0.7% | May 28, 2021 | 1CDN is open-source file sharing software. In 1CDN before commit f88a2730fa50fc2c2aeab09011f6f142fd90ec25, there is a ba... |
| CVE-2021-29507 | MEDIUM | 6.5 | 0.7% | May 28, 2021 | GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2... |
| CVE-2021-3514 | MEDIUM | 6.5 | 1.2% | May 28, 2021 | When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a spe... |
| CVE-2021-33620 | MEDIUM | 6.5 | 79.6% | May 28, 2021 | Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all... |
| CVE-2021-21734 | MEDIUM | 6.5 | 0.5% | May 28, 2021 | Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by i... |
| CVE-2021-20292 | MEDIUM | 6.7 | 0.9% | May 28, 2021 | There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouvea... |
| CVE-2021-20278 | MEDIUM | 6.5 | 0.8% | May 28, 2021 | An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `Op... |
| CVE-2021-20201 | MEDIUM | 5.3 | 2.7% | May 28, 2021 | A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a de... |
| CVE-2021-32543 | MEDIUM | 5.4 | 0.8% | May 28, 2021 | The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote atta... |
| CVE-2021-32542 | MEDIUM | 6.1 | 0.7% | May 28, 2021 | The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows un... |
| CVE-2021-32541 | MEDIUM | 5.3 | 1.5% | May 28, 2021 | The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows... |
| CVE-2021-32540 | MEDIUM | 5.4 | 0.5% | May 28, 2021 | Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to i... |
| CVE-2021-32539 | MEDIUM | 5.4 | 0.6% | May 28, 2021 | Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows ... |
| CVE-2021-33408 | MEDIUM | 6.5 | 0.7% | May 27, 2021 | Local File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote attackers to retrieve arbitr... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now