2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21130 | MEDIUM | 6.5 | 5.4% | Feb 9, 2021 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to b... |
| CVE-2021-21129 | MEDIUM | 6.5 | 5.4% | Feb 9, 2021 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to b... |
| CVE-2021-21126 | MEDIUM | 6.5 | 8.7% | Feb 9, 2021 | Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass... |
| CVE-2021-21123 | MEDIUM | 6.5 | 10.0% | Feb 9, 2021 | Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypa... |
| CVE-2021-26925 | MEDIUM | 5.4 | 1.0% | Feb 9, 2021 | Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering. |
| CVE-2021-23327 | MEDIUM | 6.3 | 1.4% | Feb 9, 2021 | The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph lege... |
| CVE-2021-3294 | MEDIUM | 5.4 | 3.0% | Feb 9, 2021 | CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a co... |
| CVE-2021-26917 | MEDIUM | 5.5 | 0.5% | Feb 8, 2021 | PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted... |
| CVE-2021-26916 | MEDIUM | 6.1 | 1.1% | Feb 8, 2021 | In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary ... |
| CVE-2021-26905 | MEDIUM | 6.5 | 1.0% | Feb 8, 2021 | 1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure ... |
| CVE-2021-21290 | MEDIUM | 5.5 | 1.8% | Feb 8, 2021 | Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable h... |
| CVE-2021-21288 | MEDIUM | 4.3 | 1.2% | Feb 8, 2021 | CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. I... |
| CVE-2021-26540 | MEDIUM | 5.3 | 1.8% | Feb 8, 2021 | Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHos... |
| CVE-2021-26539 | MEDIUM | 5.3 | 2.0% | Feb 8, 2021 | Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which co... |
| CVE-2021-22122 | MEDIUM | 6.1 | 10.5% | Feb 8, 2021 | An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version... |
| CVE-2021-3293 | MEDIUM | 5.3 | 17.4% | Feb 8, 2021 | emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webr... |
| CVE-2021-20359 | MEDIUM | 6.5 | 1.3% | Feb 8, 2021 | IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentiall... |
| CVE-2021-20358 | MEDIUM | 6.5 | 0.8% | Feb 8, 2021 | IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connecti... |
| CVE-2021-21436 | MEDIUM | 4.3 | 0.8% | Feb 8, 2021 | Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affec... |
| CVE-2021-21435 | MEDIUM | 6.5 | 1.3% | Feb 8, 2021 | Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface... |
| CVE-2021-21434 | MEDIUM | 4.8 | 0.7% | Feb 8, 2021 | Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. ano... |
| CVE-2021-22161 | MEDIUM | 6.5 | 0.5% | Feb 7, 2021 | In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic ... |
| CVE-2021-26723 | MEDIUM | 6.1 | 10.9% | Feb 6, 2021 | Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS. |
| CVE-2021-22500 | MEDIUM | 6.5 | 0.5% | Feb 6, 2021 | Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9... |
| CVE-2021-22298 | MEDIUM | 6.5 | 0.9% | Feb 6, 2021 | There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform speci... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now