2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30112 | MEDIUM | 6.5 | 0.7% | Apr 8, 2021 | Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create ... |
| CVE-2021-30111 | MEDIUM | 5.4 | 0.7% | Apr 8, 2021 | A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An ... |
| CVE-2021-3012 | MEDIUM | 5.4 | 0.7% | Apr 8, 2021 | A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remot... |
| CVE-2021-28686 | MEDIUM | 5.5 | 0.3% | Apr 8, 2021 | AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buf... |
| CVE-2021-28174 | MEDIUM | 6.5 | 1.0% | Apr 8, 2021 | Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in th... |
| CVE-2021-1475 | MEDIUM | 4.1 | 0.7% | Apr 8, 2021 | Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could all... |
| CVE-2021-1467 | MEDIUM | 4.3 | 0.7% | Apr 8, 2021 | A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar o... |
| CVE-2021-1463 | MEDIUM | 6.1 | 0.8% | Apr 8, 2021 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unaut... |
| CVE-2021-1420 | MEDIUM | 4.7 | 0.9% | Apr 8, 2021 | A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a... |
| CVE-2021-1415 | MEDIUM | 6.3 | 1.6% | Apr 8, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabi... |
| CVE-2021-1414 | MEDIUM | 6.3 | 1.9% | Apr 8, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabi... |
| CVE-2021-1413 | MEDIUM | 6.3 | 1.6% | Apr 8, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabi... |
| CVE-2021-1409 | MEDIUM | 6.1 | 0.8% | Apr 8, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis... |
| CVE-2021-1408 | MEDIUM | 6.1 | 0.8% | Apr 8, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis... |
| CVE-2021-1407 | MEDIUM | 6.1 | 0.8% | Apr 8, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis... |
| CVE-2021-1406 | MEDIUM | 4.9 | 1.1% | Apr 8, 2021 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Ma... |
| CVE-2021-1399 | MEDIUM | 4.3 | 0.6% | Apr 8, 2021 | A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communica... |
| CVE-2021-1380 | MEDIUM | 6.1 | 0.8% | Apr 8, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis... |
| CVE-2021-28166 | MEDIUM | 6.5 | 1.0% | Apr 7, 2021 | In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted C... |
| CVE-2021-29626 | MEDIUM | 5.5 | 0.3% | Apr 7, 2021 | In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-... |
| CVE-2021-21641 | MEDIUM | 4.3 | 1.2% | Apr 7, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to ... |
| CVE-2021-21640 | MEDIUM | 4.3 | 1.9% | Apr 7, 2021 | Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name... |
| CVE-2021-21639 | MEDIUM | 4.3 | 2.7% | Apr 7, 2021 | Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data s... |
| CVE-2021-20691 | MEDIUM | 6.1 | 0.8% | Apr 7, 2021 | Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp... |
| CVE-2021-20690 | MEDIUM | 6.1 | 0.8% | Apr 7, 2021 | Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now