2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36546 | HIGH | 7.5 | 0.9% | Feb 3, 2023 | Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path ... |
| CVE-2021-36544 | HIGH | 7.5 | 0.9% | Feb 3, 2023 | Incorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive information via path in... |
| CVE-2021-36532 | HIGH | 8.1 | 0.8% | Feb 3, 2023 | Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt pa... |
| CVE-2021-36493 | HIGH | 7.5 | 0.9% | Feb 3, 2023 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. |
| CVE-2021-36444 | HIGH | 8.8 | 0.6% | Feb 3, 2023 | Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via fl... |
| CVE-2021-36443 | HIGH | 8.8 | 0.6% | Feb 3, 2023 | Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token ve... |
| CVE-2021-36432 | HIGH | 7.5 | 0.9% | Feb 3, 2023 | SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie informa... |
| CVE-2021-36426 | HIGH | 8.8 | 1.1% | Feb 3, 2023 | File Upload vulnerability in phpwcms 1.9.25 allows remote attackers to run arbitrary code via crafted file upload to inc... |
| CVE-2021-3809 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which mi... |
| CVE-2021-3808 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which mi... |
| CVE-2021-3439 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being re... |
| CVE-2021-22786 | HIGH | 7.5 | 0.6% | Feb 1, 2023 | A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on th... |
| CVE-2021-4315 | HIGH | 8.8 | 0.9% | Jan 28, 2023 | A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unkn... |
| CVE-2021-41231 | HIGH | 7.2 | 1.2% | Jan 27, 2023 | OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, an administrator with the permissions to ... |
| CVE-2021-41144 | HIGH | 8.8 | 1.2% | Jan 27, 2023 | OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, a layout block was able to bypass the blo... |
| CVE-2021-41143 | HIGH | 7.2 | 1.3% | Jan 27, 2023 | OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the cu... |
| CVE-2021-39217 | HIGH | 7.2 | 1.3% | Jan 27, 2023 | OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to exec... |
| CVE-2021-41989 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions. |
| CVE-2021-41988 | HIGH | 7.8 | 0.3% | Jan 26, 2023 | Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions. |
| CVE-2021-28510 | HIGH | 7.5 | 1.0% | Jan 26, 2023 | For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invali... |
| CVE-2021-43449 | HIGH | 8.1 | 1.2% | Jan 23, 2023 | ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor servic... |
| CVE-2021-43447 | HIGH | 7.5 | 1.3% | Jan 23, 2023 | ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the docume... |
| CVE-2021-43444 | HIGH | 7.5 | 1.2% | Jan 23, 2023 | ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document download URLs can be f... |
| CVE-2021-24881 | HIGH | 7.5 | 0.8% | Jan 23, 2023 | The Passster WordPress plugin before 3.5.5.9 does not properly check for password, as well as that the post to be viewed... |
| CVE-2021-33641 | HIGH | 7.8 | 0.3% | Jan 20, 2023 | When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now