2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28179 | MEDIUM | 4.9 | 1.8% | Apr 6, 2021 | The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify t... |
| CVE-2021-28178 | MEDIUM | 4.9 | 1.8% | Apr 6, 2021 | The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by ... |
| CVE-2021-28177 | MEDIUM | 4.9 | 1.8% | Apr 6, 2021 | The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by ... |
| CVE-2021-28176 | MEDIUM | 4.9 | 1.9% | Apr 6, 2021 | The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by u... |
| CVE-2021-28175 | MEDIUM | 4.9 | 1.9% | Apr 6, 2021 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered b... |
| CVE-2021-24211 | MEDIUM | 5.4 | 0.6% | Apr 5, 2021 | The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the titl... |
| CVE-2021-24210 | MEDIUM | 6.1 | 3.1% | Apr 5, 2021 | There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request t... |
| CVE-2021-24208 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML,... |
| CVE-2021-24207 | MEDIUM | 4.3 | 0.7% | Apr 5, 2021 | By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to ... |
| CVE-2021-24206 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php) ac... |
| CVE-2021-24205 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget (includes/widgets/icon-box.php) acce... |
| CVE-2021-24204 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | In the Elementor Website Builder WordPress plugin before 3.1.4, the accordion widget (includes/widgets/accordion.php) ac... |
| CVE-2021-24203 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | In the Elementor Website Builder WordPress plugin before 3.1.4, the divider widget (includes/widgets/divider.php) accept... |
| CVE-2021-24202 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php) accept... |
| CVE-2021-24201 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | In the Elementor Website Builder WordPress plugin before 3.1.4, the column element (includes/elements/column.php) accept... |
| CVE-2021-24196 | MEDIUM | 5.4 | 0.7% | Apr 5, 2021 | The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page a... |
| CVE-2021-24187 | MEDIUM | 5.4 | 0.6% | Apr 5, 2021 | The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to refle... |
| CVE-2021-24186 | MEDIUM | 6.5 | 1.3% | Apr 5, 2021 | The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course soluti... |
| CVE-2021-24185 | MEDIUM | 6.5 | 1.3% | Apr 5, 2021 | The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7... |
| CVE-2021-24183 | MEDIUM | 6.5 | 1.7% | Apr 5, 2021 | The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress... |
| CVE-2021-24182 | MEDIUM | 6.5 | 1.7% | Apr 5, 2021 | The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution Wor... |
| CVE-2021-24181 | MEDIUM | 6.5 | 1.3% | Apr 5, 2021 | The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin ... |
| CVE-2021-24180 | MEDIUM | 5.4 | 0.6% | Apr 5, 2021 | Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Refle... |
| CVE-2021-24177 | MEDIUM | 5.4 | 0.9% | Apr 5, 2021 | In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint ... |
| CVE-2021-24176 | MEDIUM | 5.4 | 2.0% | Apr 5, 2021 | The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now