2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-24184HIGH8.8Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprot...
CVE-2021-24174HIGH8.1The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in ...
CVE-2021-24170HIGH7.5The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than...
CVE-2021-24167HIGH7.5When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send ...
CVE-2021-24163HIGH8.8The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it ha...
CVE-2021-24162HIGH8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an admini...
CVE-2021-24161HIGH8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an admini...
CVE-2021-24160HIGH8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing ma...
CVE-2021-24159HIGH8.8Due to the lack of sanitization and lack of nonce protection on the custom CSS feature, an attacker could craft a reques...
CVE-2021-24155HIGH7.2The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported fi...
CVE-2021-24150HIGH7.5The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full...
CVE-2021-30055HIGH8.8A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver componen...
CVE-2021-29261HIGH7.8The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a c...
CVE-2021-28832HIGH7.8VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration.
CVE-2021-30127HIGH7.3TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP ...
CVE-2021-29660HIGH8.8A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 a...
CVE-2021-27973HIGH7.2SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.
CVE-2021-1844HIGH8.8A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, S...
CVE-2021-1806HIGH7A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 1...
CVE-2021-1805HIGH7.8An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS ...
CVE-2021-1802HIGH7.8A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2...
CVE-2021-1793HIGH7.8This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catal...
CVE-2021-1790HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security ...
CVE-2021-1761HIGH7.5This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catal...
CVE-2021-1753HIGH7.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security U...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now