2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38376 | MEDIUM | 5.3 | 1.4% | Nov 22, 2021 | OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of t... |
| CVE-2021-38375 | MEDIUM | 6.1 | 1.3% | Nov 22, 2021 | OX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e-mail message. |
| CVE-2021-38374 | MEDIUM | 5.4 | 1.2% | Nov 22, 2021 | OX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader reference within an app load... |
| CVE-2021-38146 | HIGH | 7.5 | 11.7% | Nov 22, 2021 | The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary ... |
| CVE-2021-33495 | MEDIUM | 6.1 | 1.1% | Nov 22, 2021 | OX App Suite 7.10.5 allows XSS via an OX Chat system message. |
| CVE-2021-33494 | MEDIUM | 6.1 | 1.1% | Nov 22, 2021 | OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering. |
| CVE-2021-33493 | MEDIUM | 6 | 0.5% | Nov 22, 2021 | The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format. |
| CVE-2021-33492 | MEDIUM | 6.1 | 1.1% | Nov 22, 2021 | OX App Suite 7.10.5 allows XSS via an OX Chat room name. |
| CVE-2021-33491 | MEDIUM | 6.5 | 2.4% | Nov 22, 2021 | OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandlin... |
| CVE-2021-33490 | MEDIUM | 6.1 | 1.3% | Nov 22, 2021 | OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature. |
| CVE-2021-33489 | MEDIUM | 6.1 | 1.3% | Nov 22, 2021 | OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file. |
| CVE-2021-33488 | MEDIUM | 6.1 | 1.1% | Nov 22, 2021 | chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a deve... |
| CVE-2021-44079 | CRITICAL | 9.8 | 3.3% | Nov 22, 2021 | In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl comman... |
| CVE-2021-28710 | HIGH | 8.8 | 0.3% | Nov 21, 2021 | certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structure... |
| CVE-2021-34400 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-34399 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-23219 | MEDIUM | 4.1 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with eleva... |
| CVE-2021-23217 | HIGH | 7.5 | 0.3% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with eleva... |
| CVE-2021-23201 | HIGH | 7.5 | 0.3% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevat... |
| CVE-2021-1125 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-1105 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-1088 | MEDIUM | 4.4 | 0.2% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat... |
| CVE-2021-36340 | MEDIUM | 5.5 | 0.2% | Nov 20, 2021 | Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user ma... |
| CVE-2021-36322 | MEDIUM | 6.1 | 0.8% | Nov 20, 2021 | Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unau... |
| CVE-2021-36321 | HIGH | 7.5 | 1.2% | Nov 20, 2021 | Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now