2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21731 | HIGH | 8.1 | 0.4% | Apr 13, 2021 | A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management p... |
| CVE-2021-28647 | HIGH | 7.8 | 0.5% | Apr 13, 2021 | Trend Micro Password Manager version 5 (Consumer) is vulnerable to a DLL Hijacking vulnerability which could allow an at... |
| CVE-2021-28645 | HIGH | 7.8 | 0.5% | Apr 13, 2021 | An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 co... |
| CVE-2021-25253 | HIGH | 7.8 | 1.9% | Apr 13, 2021 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP... |
| CVE-2021-25250 | HIGH | 7.8 | 0.5% | Apr 13, 2021 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP... |
| CVE-2021-29262 | HIGH | 7.5 | 7.8% | Apr 13, 2021 | When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigest... |
| CVE-2021-29054 | HIGH | 8.8 | 0.8% | Apr 13, 2021 | Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CMS... |
| CVE-2021-22497 | HIGH | 7.2 | 0.8% | Apr 12, 2021 | Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session managem... |
| CVE-2021-21545 | HIGH | 7.8 | 0.3% | Apr 12, 2021 | Dell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation vulnerability that could ... |
| CVE-2021-3128 | HIGH | 7.5 | 2.2% | Apr 12, 2021 | In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386... |
| CVE-2021-3125 | HIGH | 7.5 | 1.5% | Apr 12, 2021 | In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, T... |
| CVE-2021-29357 | HIGH | 8.6 | 1.0% | Apr 12, 2021 | The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime manage... |
| CVE-2021-29302 | HIGH | 8.1 | 5.9% | Apr 12, 2021 | TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process i... |
| CVE-2021-23270 | HIGH | 7.5 | 1.0% | Apr 12, 2021 | In Gargoyle OS 1.12.0, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an a... |
| CVE-2021-27486 | HIGH | 7.8 | 1.0% | Apr 12, 2021 | FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-b... |
| CVE-2021-24230 | HIGH | 8.1 | 0.6% | Apr 12, 2021 | The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0... |
| CVE-2021-24227 | HIGH | 7.5 | 5.9% | Apr 12, 2021 | The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that... |
| CVE-2021-24226 | HIGH | 7.5 | 5.4% | Apr 12, 2021 | In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/product/product-shortcode.php" responsible ... |
| CVE-2021-24224 | HIGH | 8.8 | 1.9% | Apr 12, 2021 | The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticate... |
| CVE-2021-24221 | HIGH | 8.8 | 1.9% | Apr 12, 2021 | The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the r... |
| CVE-2021-24218 | HIGH | 8.8 | 0.7% | Apr 12, 2021 | The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3... |
| CVE-2021-24217 | HIGH | 8.1 | 3.5% | Apr 12, 2021 | The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it poss... |
| CVE-2021-24198 | HIGH | 8.1 | 1.5% | Apr 12, 2021 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privil... |
| CVE-2021-24197 | HIGH | 8.1 | 1.2% | Apr 12, 2021 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privil... |
| CVE-2021-23371 | HIGH | 7.5 | 2.0% | Apr 12, 2021 | This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now