2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29708 | MEDIUM | 6.7 | 0.3% | May 25, 2021 | IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic ke... |
| CVE-2021-29695 | MEDIUM | 6.5 | 2.3% | May 25, 2021 | IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker ... |
| CVE-2021-21660 | MEDIUM | 5.4 | 1.1% | May 25, 2021 | Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cr... |
| CVE-2021-29211 | MEDIUM | 4.8 | 0.6% | May 25, 2021 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrate... |
| CVE-2021-29210 | MEDIUM | 4.8 | 0.5% | May 25, 2021 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380... |
| CVE-2021-29209 | MEDIUM | 4.8 | 0.5% | May 25, 2021 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380... |
| CVE-2021-29208 | MEDIUM | 4.8 | 0.5% | May 25, 2021 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380... |
| CVE-2021-33425 | MEDIUM | 5.4 | 0.6% | May 25, 2021 | A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 whi... |
| CVE-2021-29207 | MEDIUM | 4.8 | 0.7% | May 25, 2021 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrate... |
| CVE-2021-29206 | MEDIUM | 4.8 | 0.7% | May 25, 2021 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrate... |
| CVE-2021-29205 | MEDIUM | 4.8 | 0.7% | May 25, 2021 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrate... |
| CVE-2021-29204 | MEDIUM | 4.8 | 0.7% | May 25, 2021 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrate... |
| CVE-2021-29202 | MEDIUM | 6.7 | 0.3% | May 25, 2021 | A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HP... |
| CVE-2021-29201 | MEDIUM | 4.8 | 0.7% | May 25, 2021 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrate... |
| CVE-2021-27821 | MEDIUM | 6.1 | 0.8% | May 25, 2021 | The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerabil... |
| CVE-2021-30187 | MEDIUM | 5.3 | 0.3% | May 25, 2021 | CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command. |
| CVE-2021-33562 | MEDIUM | 4.8 | 2.9% | May 24, 2021 | A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitra... |
| CVE-2021-33561 | MEDIUM | 4.8 | 2.9% | May 24, 2021 | A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary ... |
| CVE-2021-23387 | MEDIUM | 6.1 | 1.1% | May 24, 2021 | The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the UR... |
| CVE-2021-30083 | MEDIUM | 6.1 | 0.8% | May 24, 2021 | An issue was discovered in Mediat 1.4.1. There is a Reflected XSS vulnerability which allows remote attackers to inject ... |
| CVE-2021-30082 | MEDIUM | 6.1 | 0.8% | May 24, 2021 | An issue was discovered in Gris CMS v0.1. There is a Persistent XSS vulnerability which allows remote attackers to injec... |
| CVE-2021-32624 | MEDIUM | 5.3 | 0.9% | May 24, 2021 | Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly disco... |
| CVE-2021-3485 | MEDIUM | 6.6 | 0.9% | May 24, 2021 | An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linu... |
| CVE-2021-20428 | MEDIUM | 5.3 | 1.3% | May 24, 2021 | IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error... |
| CVE-2021-20386 | MEDIUM | 6.1 | 0.7% | May 24, 2021 | IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now