2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28790 | HIGH | 7.8 | 1.7% | Mar 18, 2021 | The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code... |
| CVE-2021-28789 | HIGH | 7.8 | 1.7% | Mar 18, 2021 | The unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbit... |
| CVE-2021-27306 | HIGH | 7.5 | 1.8% | Mar 18, 2021 | An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users... |
| CVE-2021-26935 | HIGH | 7.5 | 2.3% | Mar 18, 2021 | In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers S... |
| CVE-2021-24149 | HIGH | 8.8 | 1.5% | Mar 18, 2021 | Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mec[... |
| CVE-2021-24146 | HIGH | 7.5 | 31.0% | Mar 18, 2021 | Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not proper... |
| CVE-2021-24145 | HIGH | 7.2 | 88.2% | Mar 18, 2021 | Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly chec... |
| CVE-2021-24144 | HIGH | 7.8 | 1.2% | Mar 18, 2021 | Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability tha... |
| CVE-2021-24143 | HIGH | 8.8 | 1.3% | Mar 18, 2021 | Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, ... |
| CVE-2021-24142 | HIGH | 7.2 | 1.2% | Mar 18, 2021 | Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise ... |
| CVE-2021-24141 | HIGH | 7.2 | 1.2% | Mar 18, 2021 | Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high pr... |
| CVE-2021-24140 | HIGH | 7.2 | 1.2% | Mar 18, 2021 | Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin... |
| CVE-2021-24137 | HIGH | 8.8 | 1.5% | Mar 18, 2021 | Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Post... |
| CVE-2021-24132 | HIGH | 8.8 | 2.6% | Mar 18, 2021 | The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulk_action, export_full and save_slider_db functio... |
| CVE-2021-24131 | HIGH | 7.2 | 1.4% | Mar 18, 2021 | Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated ... |
| CVE-2021-24130 | HIGH | 7.2 | 1.4% | Mar 18, 2021 | Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page with... |
| CVE-2021-24125 | HIGH | 7.2 | 1.5% | Mar 18, 2021 | Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf... |
| CVE-2021-24123 | HIGH | 7.2 | 1.6% | Mar 18, 2021 | Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded fee... |
| CVE-2021-26237 | HIGH | 7.8 | 2.7% | Mar 18, 2021 | FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user ope... |
| CVE-2021-26235 | HIGH | 7.8 | 1.1% | Mar 18, 2021 | FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when ... |
| CVE-2021-26234 | HIGH | 7.8 | 1.1% | Mar 18, 2021 | FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user ope... |
| CVE-2021-26233 | HIGH | 7.8 | 1.1% | Mar 18, 2021 | FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, triggered when ... |
| CVE-2021-21627 | HIGH | 8.8 | 0.8% | Mar 18, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to... |
| CVE-2021-26236 | HIGH | 7.8 | 2.0% | Mar 18, 2021 | FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsi... |
| CVE-2021-23359 | HIGH | 8.8 | 1.7% | Mar 18, 2021 | This affects all versions of package port-killer. If (attacker-controlled) user input is given, it is possible for an at... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now