2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24907 | MEDIUM | 6.1 | 0.9% | Dec 21, 2021 | The Contact Form, Drag and Drop Form Builder for WordPress plugin before 1.8.0 does not escape the status parameter befo... |
| CVE-2021-24849 | CRITICAL | 9.8 | 8.5% | Dec 21, 2021 | The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticate... |
| CVE-2021-24846 | HIGH | 8.8 | 1.3% | Dec 21, 2021 | The get_query() function of the Ni WooCommerce Custom Order Status WordPress plugin before 1.9.7, used by the niwoocos_a... |
| CVE-2021-24750 | HIGH | 8.8 | 38.6% | Dec 21, 2021 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refU... |
| CVE-2021-24739 | HIGH | 8.1 | 1.0% | Dec 21, 2021 | The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arb... |
| CVE-2021-24738 | MEDIUM | 5.4 | 0.6% | Dec 21, 2021 | The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which co... |
| CVE-2021-24578 | MEDIUM | 6.1 | 0.8% | Dec 21, 2021 | The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting bac... |
| CVE-2021-45451 | HIGH | 7.5 | 0.8% | Dec 21, 2021 | In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer... |
| CVE-2021-45450 | HIGH | 7.5 | 1.1% | Dec 21, 2021 | In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or ora... |
| CVE-2021-43842 | MEDIUM | 5.4 | 0.7% | Dec 20, 2021 | Wiki.js is a wiki app built on Node.js. Wiki.js versions 2.5.257 and earlier are vulnerable to stored cross-site scripti... |
| CVE-2021-43847 | MEDIUM | 6.5 | 1.2% | Dec 20, 2021 | HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possibl... |
| CVE-2021-43846 | MEDIUM | 4.3 | 0.6% | Dec 20, 2021 | `solidus_frontend` is the cart and storefront for the Solidus e-commerce project. Versions of `solidus_frontend` prior t... |
| CVE-2021-43844 | HIGH | 8.8 | 3.3% | Dec 20, 2021 | MSEdgeRedirect is a tool to redirect news, search, widgets, weather, and more to a user's default browser. MSEdgeRedirec... |
| CVE-2021-43843 | HIGH | 7.5 | 1.9% | Dec 20, 2021 | jsx-slack is a package for building JSON objects for Slack block kit surfaces from JSX. The maintainers found the patch ... |
| CVE-2021-3860 | HIGH | 8.8 | 1.0% | Dec 20, 2021 | JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged... |
| CVE-2021-44699 | LOW | 3.3 | 1.8% | Dec 20, 2021 | Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability th... |
| CVE-2021-44698 | LOW | 3.3 | 1.8% | Dec 20, 2021 | Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability th... |
| CVE-2021-44697 | LOW | 3.3 | 1.8% | Dec 20, 2021 | Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability th... |
| CVE-2021-44183 | LOW | 3.3 | 1.5% | Dec 20, 2021 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disc... |
| CVE-2021-44182 | LOW | 3.3 | 1.7% | Dec 20, 2021 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disc... |
| CVE-2021-44181 | HIGH | 7.8 | 3.1% | Dec 20, 2021 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in a... |
| CVE-2021-44180 | HIGH | 7.8 | 3.1% | Dec 20, 2021 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in a... |
| CVE-2021-44179 | HIGH | 7.8 | 3.0% | Dec 20, 2021 | Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling o... |
| CVE-2021-43763 | LOW | 3.3 | 1.7% | Dec 20, 2021 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disc... |
| CVE-2021-43750 | MEDIUM | 5.5 | 1.4% | Dec 20, 2021 | Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthent... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now