2021 CVE Vulnerabilities
23,451 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29032 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29031 | MEDIUM | 4.8 | 0.9% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29030 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29029 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29028 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29027 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29026 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29025 | MEDIUM | 4.8 | 0.8% | Mar 24, 2021 | A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t... |
| CVE-2021-29133 | MEDIUM | 5.5 | 1.1% | Mar 24, 2021 | Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to... |
| CVE-2021-3409 | MEDIUM | 5.7 | 0.5% | Mar 23, 2021 | The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bound... |
| CVE-2021-28100 | MEDIUM | 5.5 | 0.3% | Mar 23, 2021 | Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the... |
| CVE-2021-28099 | MEDIUM | 4.4 | 0.2% | Mar 23, 2021 | In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create... |
| CVE-2021-27908 | MEDIUM | 4.4 | 0.3% | Mar 23, 2021 | In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an au... |
| CVE-2021-21402 | MEDIUM | 6.5 | 79.9% | Mar 23, 2021 | Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted reques... |
| CVE-2021-23362 | MEDIUM | 5.3 | 3.6% | Mar 23, 2021 | The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expr... |
| CVE-2021-20227 | MEDIUM | 5.5 | 0.5% | Mar 23, 2021 | A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of r... |
| CVE-2021-20219 | MEDIUM | 5.5 | 0.4% | Mar 23, 2021 | A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In... |
| CVE-2021-21377 | MEDIUM | 5.4 | 0.8% | Mar 23, 2021 | OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports ... |
| CVE-2021-21376 | MEDIUM | 6.5 | 1.5% | Mar 23, 2021 | OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads var... |
| CVE-2021-27969 | MEDIUM | 4.8 | 0.7% | Mar 23, 2021 | Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter. |
| CVE-2021-27531 | MEDIUM | 4.8 | 0.8% | Mar 23, 2021 | A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "... |
| CVE-2021-27530 | MEDIUM | 4.8 | 0.8% | Mar 23, 2021 | A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in ... |
| CVE-2021-27529 | MEDIUM | 4.8 | 0.8% | Mar 23, 2021 | A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "... |
| CVE-2021-27528 | MEDIUM | 4.8 | 0.8% | Mar 23, 2021 | A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "... |
| CVE-2021-27527 | MEDIUM | 4.8 | 0.8% | Mar 23, 2021 | A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now