2021 CVE Vulnerabilities
23,451 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20306 | MEDIUM | 4.3 | 0.7% | Jun 1, 2021 | A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the na... |
| CVE-2021-23021 | MEDIUM | 5.5 | 0.2% | Jun 1, 2021 | The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with c... |
| CVE-2021-23020 | MEDIUM | 5.5 | 0.3% | Jun 1, 2021 | The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which co... |
| CVE-2021-25932 | MEDIUM | 5.4 | 0.9% | Jun 1, 2021 | In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation... |
| CVE-2021-32635 | MEDIUM | 6.3 | 1.4% | May 28, 2021 | Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `si... |
| CVE-2021-32616 | MEDIUM | 6.1 | 0.7% | May 28, 2021 | 1CDN is open-source file sharing software. In 1CDN before commit f88a2730fa50fc2c2aeab09011f6f142fd90ec25, there is a ba... |
| CVE-2021-29507 | MEDIUM | 6.5 | 0.7% | May 28, 2021 | GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2... |
| CVE-2021-3514 | MEDIUM | 6.5 | 1.2% | May 28, 2021 | When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a spe... |
| CVE-2021-33620 | MEDIUM | 6.5 | 79.6% | May 28, 2021 | Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all... |
| CVE-2021-21734 | MEDIUM | 6.5 | 0.5% | May 28, 2021 | Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by i... |
| CVE-2021-20292 | MEDIUM | 6.7 | 0.9% | May 28, 2021 | There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouvea... |
| CVE-2021-20278 | MEDIUM | 6.5 | 0.8% | May 28, 2021 | An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `Op... |
| CVE-2021-20201 | MEDIUM | 5.3 | 2.7% | May 28, 2021 | A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a de... |
| CVE-2021-32543 | MEDIUM | 5.4 | 0.8% | May 28, 2021 | The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote atta... |
| CVE-2021-32542 | MEDIUM | 6.1 | 0.7% | May 28, 2021 | The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows un... |
| CVE-2021-32541 | MEDIUM | 5.3 | 1.5% | May 28, 2021 | The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows... |
| CVE-2021-32540 | MEDIUM | 5.4 | 0.5% | May 28, 2021 | Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to i... |
| CVE-2021-32539 | MEDIUM | 5.4 | 0.6% | May 28, 2021 | Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows ... |
| CVE-2021-33408 | MEDIUM | 6.5 | 0.7% | May 27, 2021 | Local File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote attackers to retrieve arbitr... |
| CVE-2021-33394 | MEDIUM | 5.4 | 0.7% | May 27, 2021 | Cubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie after the user is logged ... |
| CVE-2021-32643 | MEDIUM | 5.8 | 1.4% | May 27, 2021 | Http4s is a Scala interface for HTTP services. `StaticFile.fromUrl` can leak the presence of a directory on a server whe... |
| CVE-2021-32645 | MEDIUM | 6.1 | 1.0% | May 27, 2021 | Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is ... |
| CVE-2021-27492 | MEDIUM | 5.5 | 1.7% | May 27, 2021 | When opening a specially crafted 3DXML file, the application containing Datakit Software libraries CatiaV5_3dRead, Catia... |
| CVE-2021-31808 | MEDIUM | 6.5 | 5.5% | May 27, 2021 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a... |
| CVE-2021-31806 | MEDIUM | 6.5 | 95.8% | May 27, 2021 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now