2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27436 | MEDIUM | 6.1 | 0.7% | Mar 18, 2021 | WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malici... |
| CVE-2021-3416 | MEDIUM | 6 | 0.5% | Mar 18, 2021 | A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and incl... |
| CVE-2021-25764 | MEDIUM | 5.3 | 0.8% | Mar 18, 2021 | In JetBrains PhpStorm before 2020.3, source code could be added to debug logs. |
| CVE-2021-28160 | MEDIUM | 6.1 | 0.8% | Mar 18, 2021 | Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) suffers from a reflected XSS vulnerability due to unsanitized SSID value w... |
| CVE-2021-21383 | MEDIUM | 5.4 | 0.9% | Mar 18, 2021 | Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scri... |
| CVE-2021-28796 | MEDIUM | 6.1 | 0.8% | Mar 18, 2021 | Increments Qiita::Markdown before 0.33.0 allows XSS in transformers. |
| CVE-2021-28145 | MEDIUM | 5.4 | 0.9% | Mar 18, 2021 | Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted su... |
| CVE-2021-26216 | MEDIUM | 4.3 | 0.5% | Mar 18, 2021 | SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php. |
| CVE-2021-26215 | MEDIUM | 4.3 | 0.5% | Mar 18, 2021 | SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php. |
| CVE-2021-24147 | MEDIUM | 5.4 | 0.7% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.... |
| CVE-2021-24138 | MEDIUM | 5.5 | 1.2% | Mar 18, 2021 | Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via para... |
| CVE-2021-24136 | MEDIUM | 5.4 | 0.8% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the Testimonials Widget WordPress plugin, versions before 4.0.0, lead t... |
| CVE-2021-24135 | MEDIUM | 6.1 | 1.1% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead t... |
| CVE-2021-24134 | MEDIUM | 4.8 | 0.7% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lea... |
| CVE-2021-24133 | MEDIUM | 4.3 | 0.5% | Mar 18, 2021 | Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could all... |
| CVE-2021-24129 | MEDIUM | 5.4 | 0.7% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lea... |
| CVE-2021-24128 | MEDIUM | 5.4 | 0.7% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the Team Members WordPress plugin, versions before 5.0.4, lead to Cross... |
| CVE-2021-24127 | MEDIUM | 5.4 | 0.7% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions... |
| CVE-2021-24126 | MEDIUM | 5.4 | 0.7% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did ... |
| CVE-2021-24124 | MEDIUM | 6.1 | 1.1% | Mar 18, 2021 | Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Una... |
| CVE-2021-28133 | MEDIUM | 4.3 | 16.3% | Mar 18, 2021 | Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the par... |
| CVE-2021-21626 | MEDIUM | 4.3 | 0.9% | Mar 18, 2021 | Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing fo... |
| CVE-2021-21625 | MEDIUM | 4.3 | 0.7% | Mar 18, 2021 | Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTT... |
| CVE-2021-21624 | MEDIUM | 4.3 | 0.9% | Mar 18, 2021 | An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with ... |
| CVE-2021-21623 | MEDIUM | 6.5 | 1.0% | Mar 18, 2021 | An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with It... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now