2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45087 | MEDIUM | 6.1 | 1.5% | Dec 16, 2021 | XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used,... |
| CVE-2021-45086 | MEDIUM | 6.1 | 1.3% | Dec 16, 2021 | XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used... |
| CVE-2021-45085 | MEDIUM | 6.1 | 1.5% | Dec 16, 2021 | XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-a... |
| CVE-2021-44023 | HIGH | 7.1 | 0.4% | Dec 16, 2021 | A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products c... |
| CVE-2021-43834 | CRITICAL | 9.8 | 1.0% | Dec 16, 2021 | eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability wh... |
| CVE-2021-43833 | HIGH | 8.8 | 0.8% | Dec 16, 2021 | eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability wh... |
| CVE-2021-45018 | MEDIUM | 6.1 | 0.6% | Dec 15, 2021 | Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admi... |
| CVE-2021-45017 | HIGH | 8.8 | 0.4% | Dec 15, 2021 | Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on... |
| CVE-2021-44350 | CRITICAL | 9.8 | 1.4% | Dec 15, 2021 | SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php. |
| CVE-2021-44116 | MEDIUM | 6.1 | 0.7% | Dec 15, 2021 | Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column t... |
| CVE-2021-4119 | CRITICAL | 9.8 | 26.9% | Dec 15, 2021 | bookstack is vulnerable to Improper Access Control |
| CVE-2021-45078 | HIGH | 7.8 | 1.3% | Dec 15, 2021 | stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-base... |
| CVE-2021-43836 | HIGH | 8.8 | 2.0% | Dec 15, 2021 | Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker ca... |
| CVE-2021-43835 | HIGH | 7.2 | 1.1% | Dec 15, 2021 | Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who... |
| CVE-2021-43831 | HIGH | 7.7 | 3.8% | Dec 15, 2021 | Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.... |
| CVE-2021-43806 | HIGH | 8.8 | 1.5% | Dec 15, 2021 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected v... |
| CVE-2021-43782 | HIGH | 7.2 | 1.4% | Dec 15, 2021 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. This is a fol... |
| CVE-2021-41276 | HIGH | 7.2 | 1.5% | Dec 15, 2021 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected v... |
| CVE-2021-35490 | MEDIUM | 5.4 | 0.5% | Dec 15, 2021 | Thruk before 2.44 allows XSS for a quick command. |
| CVE-2021-29847 | MEDIUM | 5.9 | 1.0% | Dec 15, 2021 | BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user t... |
| CVE-2021-27859 | HIGH | 8.8 | 1.6% | Dec 15, 2021 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t... |
| CVE-2021-27858 | MEDIUM | 5.3 | 2.7% | Dec 15, 2021 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t... |
| CVE-2021-27857 | HIGH | 7.5 | 1.8% | Dec 15, 2021 | A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t... |
| CVE-2021-27856 | CRITICAL | 9.8 | 5.6% | Dec 15, 2021 | FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" ... |
| CVE-2021-27855 | HIGH | 8.8 | 1.6% | Dec 15, 2021 | FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated atta... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now