2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21320 | MEDIUM | 4.3 | 0.9% | Mar 2, 2021 | matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0... |
| CVE-2021-27888 | MEDIUM | 6.1 | 0.6% | Mar 2, 2021 | ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters. |
| CVE-2021-27731 | MEDIUM | 6.1 | 0.7% | Mar 2, 2021 | Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed ve... |
| CVE-2021-27884 | MEDIUM | 5.1 | 0.3% | Mar 1, 2021 | Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tok... |
| CVE-2021-26702 | MEDIUM | 6.1 | 2.7% | Mar 1, 2021 | EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI. |
| CVE-2021-26475 | MEDIUM | 6.1 | 6.1% | Mar 1, 2021 | EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI. |
| CVE-2021-3332 | MEDIUM | 5.3 | 1.8% | Mar 1, 2021 | WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password. |
| CVE-2021-27318 | MEDIUM | 6.1 | 1.5% | Mar 1, 2021 | Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to in... |
| CVE-2021-27317 | MEDIUM | 6.1 | 1.3% | Mar 1, 2021 | Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to in... |
| CVE-2021-21515 | MEDIUM | 5.4 | 0.8% | Mar 1, 2021 | Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privil... |
| CVE-2021-22114 | MEDIUM | 5.3 | 1.0% | Mar 1, 2021 | Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write... |
| CVE-2021-27225 | MEDIUM | 5.4 | 0.5% | Mar 1, 2021 | In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have cod... |
| CVE-2021-3151 | MEDIUM | 5.4 | 1.2% | Feb 27, 2021 | i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attac... |
| CVE-2021-25284 | MEDIUM | 4.4 | 0.5% | Feb 27, 2021 | An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or ... |
| CVE-2021-26565 | MEDIUM | 5.9 | 0.7% | Feb 26, 2021 | Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before... |
| CVE-2021-26563 | MEDIUM | 6.7 | 0.5% | Feb 26, 2021 | Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 all... |
| CVE-2021-0406 | MEDIUM | 6.7 | 0.1% | Feb 26, 2021 | In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2021-0405 | MEDIUM | 6.7 | 0.1% | Feb 26, 2021 | In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local e... |
| CVE-2021-0404 | MEDIUM | 4.4 | 0.1% | Feb 26, 2021 | In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local i... |
| CVE-2021-0403 | MEDIUM | 4.4 | 0.1% | Feb 26, 2021 | In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local infor... |
| CVE-2021-0402 | MEDIUM | 6.7 | 0.1% | Feb 26, 2021 | In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation o... |
| CVE-2021-0401 | MEDIUM | 6.4 | 0.1% | Feb 26, 2021 | In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege ... |
| CVE-2021-0367 | MEDIUM | 6.4 | 0.1% | Feb 26, 2021 | In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege ... |
| CVE-2021-0366 | MEDIUM | 6.4 | 0.1% | Feb 26, 2021 | In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege ... |
| CVE-2021-23345 | MEDIUM | 5.3 | 1.1% | Feb 26, 2021 | All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery (SSRF) via t... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now