2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39313 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The Simple Image Gallery WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in... |
| CVE-2021-39312 | HIGH | 7.5 | 78.4% | Dec 14, 2021 | The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp... |
| CVE-2021-39311 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The link-list-manager WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category parameter found ... |
| CVE-2021-39310 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The Real WYSIWYG WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of PHP_SELF in the ~/re... |
| CVE-2021-39309 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parame... |
| CVE-2021-39308 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientre... |
| CVE-2021-38361 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The .htaccess Redirect WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the link parameter found in ... |
| CVE-2021-38182 | HIGH | 8.8 | 1.1% | Dec 14, 2021 | Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privile... |
| CVE-2021-4107 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-4007 | HIGH | 7.8 | 0.3% | Dec 14, 2021 | Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL se... |
| CVE-2021-44949 | CRITICAL | 9.8 | 1.1% | Dec 14, 2021 | glFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php. |
| CVE-2021-42051 | MEDIUM | 5.4 | 0.8% | Dec 14, 2021 | An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a ma... |
| CVE-2021-42050 | MEDIUM | 6.1 | 0.9% | Dec 14, 2021 | An issue was discovered in AbanteCart before 1.3.2. It allows DOM Based XSS. |
| CVE-2021-45015 | CRITICAL | 9.1 | 1.2% | Dec 14, 2021 | taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72. |
| CVE-2021-45014 | CRITICAL | 9.8 | 1.1% | Dec 14, 2021 | There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&... |
| CVE-2021-44538 | CRITICAL | 9.8 | 1.9% | Dec 14, 2021 | The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session obje... |
| CVE-2021-3376 | HIGH | 8.8 | 1.1% | Dec 14, 2021 | An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privil... |
| CVE-2021-36721 | MEDIUM | 5.3 | 0.4% | Dec 14, 2021 | Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 ve... |
| CVE-2021-44937 | MEDIUM | 5.3 | 0.7% | Dec 14, 2021 | glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker c... |
| CVE-2021-44935 | CRITICAL | 9.1 | 0.5% | Dec 14, 2021 | glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php. The attack... |
| CVE-2021-4104 | HIGH | 7.5 | 81.1% | Dec 14, 2021 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Lo... |
| CVE-2021-44524 | CRITICAL | 9.8 | 1.6% | Dec 14, 2021 | A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), S... |
| CVE-2021-44523 | CRITICAL | 9.1 | 1.4% | Dec 14, 2021 | A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), S... |
| CVE-2021-44522 | HIGH | 7.5 | 1.4% | Dec 14, 2021 | A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), S... |
| CVE-2021-44450 | HIGH | 7.8 | 0.6% | Dec 14, 2021 | A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK li... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now