2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25357 | MEDIUM | 5.5 | 0.1% | Apr 9, 2021 | A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.... |
| CVE-2021-21728 | MEDIUM | 5.3 | 1.0% | Apr 9, 2021 | A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consum... |
| CVE-2021-21432 | MEDIUM | 6.5 | 1.0% | Apr 9, 2021 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. An authentication... |
| CVE-2021-20080 | MEDIUM | 6.1 | 93.1% | Apr 9, 2021 | Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer be... |
| CVE-2021-25327 | MEDIUM | 6.5 | 0.9% | Apr 9, 2021 | Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-r... |
| CVE-2021-25326 | MEDIUM | 5.4 | 1.5% | Apr 9, 2021 | Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/test_ver... |
| CVE-2021-30458 | MEDIUM | 6.1 | 1.0% | Apr 9, 2021 | An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikite... |
| CVE-2021-30159 | MEDIUM | 4.3 | 1.6% | Apr 9, 2021 | An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Users can bypass intended r... |
| CVE-2021-30156 | MEDIUM | 4.3 | 1.2% | Apr 9, 2021 | An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Special:Contributions can l... |
| CVE-2021-30155 | MEDIUM | 4.3 | 1.2% | Apr 9, 2021 | An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not... |
| CVE-2021-30152 | MEDIUM | 4.3 | 1.2% | Apr 9, 2021 | An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki AP... |
| CVE-2021-3482 | MEDIUM | 6.5 | 2.3% | Apr 8, 2021 | A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size pro... |
| CVE-2021-3448 | MEDIUM | 4 | 2.0% | Apr 8, 2021 | A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interf... |
| CVE-2021-3413 | MEDIUM | 6.3 | 0.7% | Apr 8, 2021 | A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was id... |
| CVE-2021-22513 | MEDIUM | 6.5 | 1.2% | Apr 8, 2021 | Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerabili... |
| CVE-2021-22512 | MEDIUM | 6.5 | 0.7% | Apr 8, 2021 | Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The... |
| CVE-2021-22511 | MEDIUM | 6.5 | 0.4% | Apr 8, 2021 | Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The v... |
| CVE-2021-22510 | MEDIUM | 6.1 | 5.0% | Apr 8, 2021 | Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affec... |
| CVE-2021-22312 | MEDIUM | 6.5 | 0.8% | Apr 8, 2021 | There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerab... |
| CVE-2021-22115 | MEDIUM | 6.5 | 0.8% | Apr 8, 2021 | Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config... |
| CVE-2021-27945 | MEDIUM | 6.1 | 0.6% | Apr 8, 2021 | The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.0.... |
| CVE-2021-28924 | MEDIUM | 6.1 | 9.2% | Apr 8, 2021 | Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page. |
| CVE-2021-20480 | MEDIUM | 6.5 | 1.3% | Apr 8, 2021 | IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a spe... |
| CVE-2021-30114 | MEDIUM | 6.5 | 0.7% | Apr 8, 2021 | Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create ... |
| CVE-2021-30113 | MEDIUM | 6.1 | 0.9% | Apr 8, 2021 | A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attac... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now