2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-0212MEDIUM5An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker ab...
CVE-2021-0210MEDIUM6.8An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevat...
CVE-2021-0209MEDIUM6.5In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to ...
CVE-2021-0205MEDIUM5.8When the "Intrusion Detection Service" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall...
CVE-2021-22171MEDIUM6.5Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a vict...
CVE-2021-22168MEDIUM6.5A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting ...
CVE-2021-23838MEDIUM4.8An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_fi...
CVE-2021-23837MEDIUM6.5An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selec...
CVE-2021-23836MEDIUM4.8An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_...
CVE-2021-23835MEDIUM4.9An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the ...
CVE-2021-22132MEDIUM4.8Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute...
CVE-2021-21722MEDIUM4.4A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers ...
CVE-2021-24122MEDIUM5.9When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9...
CVE-2021-21012MEDIUM5.3Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direc...
CVE-2021-1311MEDIUM5.4A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an ...
CVE-2021-1310MEDIUM4.7A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote att...
CVE-2021-1267MEDIUM4.3A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated...
CVE-2021-1258MEDIUM5.5A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local ...
CVE-2021-1246MEDIUM6.1Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vu...
CVE-2021-1245MEDIUM6.1Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in th...
CVE-2021-1242MEDIUM4.3A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the...
CVE-2021-1239MEDIUM4.8Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an...
CVE-2021-1238MEDIUM4.8Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an...
CVE-2021-1236MEDIUM5.3Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an un...
CVE-2021-1226MEDIUM6.5A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Man...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now