2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25179 | MEDIUM | 6.1 | 1.4% | May 5, 2021 | SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header. |
| CVE-2021-26804 | MEDIUM | 6.5 | 1.2% | May 4, 2021 | Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validatio... |
| CVE-2021-21264 | MEDIUM | 5.2 | 0.3% | May 3, 2021 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 ... |
| CVE-2021-28359 | MEDIUM | 6.1 | 14.4% | May 2, 2021 | The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects... |
| CVE-2021-31935 | MEDIUM | 6.1 | 0.9% | Apr 30, 2021 | OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandl... |
| CVE-2021-31934 | MEDIUM | 6.1 | 0.9% | Apr 30, 2021 | OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that ... |
| CVE-2021-31792 | MEDIUM | 5.4 | 0.9% | Apr 30, 2021 | XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field |
| CVE-2021-21547 | MEDIUM | 6.7 | 0.1% | Apr 30, 2021 | Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerabili... |
| CVE-2021-21543 | MEDIUM | 4.8 | 0.6% | Apr 30, 2021 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities. A remote auth... |
| CVE-2021-21542 | MEDIUM | 4.8 | 0.4% | Apr 30, 2021 | Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote auth... |
| CVE-2021-21541 | MEDIUM | 6.1 | 0.8% | Apr 30, 2021 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenti... |
| CVE-2021-21229 | MEDIUM | 6.5 | 0.9% | Apr 30, 2021 | Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perfor... |
| CVE-2021-21228 | MEDIUM | 4.3 | 1.1% | Apr 30, 2021 | Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a... |
| CVE-2021-31926 | MEDIUM | 6.5 | 0.9% | Apr 30, 2021 | AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open po... |
| CVE-2021-29463 | MEDIUM | 5.5 | 1.1% | Apr 30, 2021 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image file... |
| CVE-2021-21537 | MEDIUM | 5.5 | 0.2% | Apr 30, 2021 | Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker... |
| CVE-2021-21536 | MEDIUM | 5.5 | 0.2% | Apr 30, 2021 | Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker... |
| CVE-2021-20515 | MEDIUM | 6.7 | 0.3% | Apr 30, 2021 | IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A ... |
| CVE-2021-31232 | MEDIUM | 5.5 | 0.4% | Apr 30, 2021 | The Alertmanager in CNCF Cortex before 1.8.1 has a local file disclosure vulnerability when -experimental.alertmanager.e... |
| CVE-2021-31231 | MEDIUM | 5.5 | 0.3% | Apr 30, 2021 | The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vul... |
| CVE-2021-20266 | MEDIUM | 4.9 | 1.7% | Apr 30, 2021 | A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause ... |
| CVE-2021-20326 | MEDIUM | 6.5 | 0.9% | Apr 30, 2021 | A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoD... |
| CVE-2021-29484 | MEDIUM | 6.8 | 7.9% | Apr 29, 2021 | Ghost is a Node.js CMS. An unused endpoint added during the development of 4.0.0 has left sites vulnerable to untrusted ... |
| CVE-2021-1087 | MEDIUM | 5.5 | 0.2% | Apr 29, 2021 | NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to r... |
| CVE-2021-1495 | MEDIUM | 5.3 | 1.7% | Apr 29, 2021 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticate... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now