2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3114 | MEDIUM | 6.5 | 2.7% | Jan 26, 2021 | In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an und... |
| CVE-2021-25901 | MEDIUM | 5.3 | 1.3% | Jan 26, 2021 | An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data r... |
| CVE-2021-22873 | MEDIUM | 6.1 | 66.1% | Jan 26, 2021 | Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg... |
| CVE-2021-22872 | MEDIUM | 6.1 | 3.4% | Jan 26, 2021 | Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly acce... |
| CVE-2021-22871 | MEDIUM | 4.8 | 2.1% | Jan 26, 2021 | Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL webs... |
| CVE-2021-21615 | MEDIUM | 5.3 | 0.9% | Jan 26, 2021 | Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifact... |
| CVE-2021-21275 | MEDIUM | 4.3 | 0.7% | Jan 25, 2021 | The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was ... |
| CVE-2021-21270 | MEDIUM | 5.5 | 0.3% | Jan 22, 2021 | OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server ... |
| CVE-2021-21260 | MEDIUM | 5.4 | 0.6% | Jan 22, 2021 | Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants... |
| CVE-2021-21259 | MEDIUM | 6.1 | 1.4% | Jan 22, 2021 | HedgeDoc is open source software which lets you create real-time collaborative markdown notes. In HedgeDoc before versio... |
| CVE-2021-22849 | MEDIUM | 5.4 | 0.5% | Jan 22, 2021 | Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syn... |
| CVE-2021-21253 | MEDIUM | 5.3 | 0.7% | Jan 21, 2021 | OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passw... |
| CVE-2021-21239 | MEDIUM | 6.5 | 1.2% | Jan 21, 2021 | PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of... |
| CVE-2021-21238 | MEDIUM | 6.5 | 1.1% | Jan 21, 2021 | PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of... |
| CVE-2021-1069 | MEDIUM | 6.1 | 0.3% | Jan 20, 2021 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnorm... |
| CVE-2021-1067 | MEDIUM | 6.8 | 0.4% | Jan 20, 2021 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status... |
| CVE-2021-1250 | MEDIUM | 5.4 | 0.6% | Jan 20, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a... |
| CVE-2021-1249 | MEDIUM | 5.4 | 0.6% | Jan 20, 2021 | Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a... |
| CVE-2021-1235 | MEDIUM | 5.5 | 0.3% | Jan 20, 2021 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensiti... |
| CVE-2021-1233 | MEDIUM | 4.4 | 0.3% | Jan 20, 2021 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive inf... |
| CVE-2021-1218 | MEDIUM | 5.4 | 0.6% | Jan 20, 2021 | A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, ... |
| CVE-2021-1135 | MEDIUM | 4.3 | 0.6% | Jan 20, 2021 | Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticat... |
| CVE-2021-1364 | MEDIUM | 4.9 | 1.3% | Jan 20, 2021 | Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a... |
| CVE-2021-1357 | MEDIUM | 6.5 | 1.4% | Jan 20, 2021 | Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a... |
| CVE-2021-1355 | MEDIUM | 6.5 | 1.4% | Jan 20, 2021 | Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now