2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22185 | MEDIUM | 5.4 | 0.8% | Mar 24, 2021 | Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site... |
| CVE-2021-22179 | MEDIUM | 5.4 | 0.9% | Mar 24, 2021 | A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbou... |
| CVE-2021-22178 | MEDIUM | 5 | 1.1% | Mar 24, 2021 | An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack t... |
| CVE-2021-22176 | MEDIUM | 4.3 | 1.0% | Mar 24, 2021 | An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demote... |
| CVE-2021-29002 | MEDIUM | 5.4 | 0.8% | Mar 24, 2021 | A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.s... |
| CVE-2021-29033 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29032 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29031 | MEDIUM | 4.8 | 0.9% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29030 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29029 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29028 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29027 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29026 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29025 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29133 | MEDIUM | 5.5 | 1.1% | Mar 24, 2021 | Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to... |
| CVE-2021-3409 | MEDIUM | 5.7 | 0.5% | Mar 23, 2021 | The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bound... |
| CVE-2021-28100 | MEDIUM | 5.5 | 0.3% | Mar 23, 2021 | Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the... |
| CVE-2021-28099 | MEDIUM | 4.4 | 0.2% | Mar 23, 2021 | In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create... |
| CVE-2021-27908 | MEDIUM | 4.4 | 0.3% | Mar 23, 2021 | In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an au... |
| CVE-2021-21402 | MEDIUM | 6.5 | 79.9% | Mar 23, 2021 | Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted reques... |
| CVE-2021-23362 | MEDIUM | 5.3 | 3.6% | Mar 23, 2021 | The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expr... |
| CVE-2021-20227 | MEDIUM | 5.5 | 0.5% | Mar 23, 2021 | A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of r... |
| CVE-2021-20219 | MEDIUM | 5.5 | 0.4% | Mar 23, 2021 | A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In... |
| CVE-2021-21377 | MEDIUM | 5.4 | 0.8% | Mar 23, 2021 | OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports ... |
| CVE-2021-21376 | MEDIUM | 6.5 | 1.5% | Mar 23, 2021 | OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads var... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now