2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42370 | HIGH | 7.5 | 0.7% | Nov 8, 2021 | A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is pr... |
| CVE-2021-42078 | MEDIUM | 6.1 | 0.9% | Nov 8, 2021 | PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/... |
| CVE-2021-42077 | CRITICAL | 9.8 | 2.4% | Nov 8, 2021 | PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username... |
| CVE-2021-42076 | HIGH | 7.5 | 1.5% | Nov 8, 2021 | An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka ... |
| CVE-2021-42075 | HIGH | 7.5 | 2.1% | Nov 8, 2021 | An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) ... |
| CVE-2021-42074 | HIGH | 7.5 | 1.7% | Nov 8, 2021 | An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barri... |
| CVE-2021-42073 | HIGH | 8.2 | 1.4% | Nov 8, 2021 | An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers compone... |
| CVE-2021-42072 | HIGH | 8.8 | 1.6% | Nov 8, 2021 | An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) ... |
| CVE-2021-34685 | HIGH | 7.2 | 2.2% | Nov 8, 2021 | UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, wh... |
| CVE-2021-34684 | CRITICAL | 9.8 | 5.8% | Nov 8, 2021 | Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries o... |
| CVE-2021-31602 | HIGH | 7.5 | 51.7% | Nov 8, 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The... |
| CVE-2021-31601 | MEDIUM | 6.5 | 1.3% | Nov 8, 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The... |
| CVE-2021-31600 | MEDIUM | 4.3 | 1.0% | Nov 8, 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The... |
| CVE-2021-31599 | HIGH | 8.8 | 2.3% | Nov 8, 2021 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A r... |
| CVE-2021-43414 | HIGH | 7 | 0.3% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is v... |
| CVE-2021-43413 | HIGH | 8.8 | 1.9% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file... |
| CVE-2021-43412 | HIGH | 7.8 | 0.3% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification messages from any client o... |
| CVE-2021-43411 | HIGH | 7.5 | 1.2% | Nov 7, 2021 | An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of ... |
| CVE-2021-25978 | MEDIUM | 5.4 | 0.5% | Nov 7, 2021 | Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that co... |
| CVE-2021-37471 | HIGH | 7.5 | 1.2% | Nov 7, 2021 | Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that prov... |
| CVE-2021-41251 | MEDIUM | 5.9 | 1.7% | Nov 5, 2021 | @sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform... |
| CVE-2021-41250 | MEDIUM | 4.3 | 0.7% | Nov 5, 2021 | Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted UR... |
| CVE-2021-41230 | HIGH | 8.8 | 0.8% | Nov 5, 2021 | Pomerium is an open source identity-aware access proxy. In affected versions changes to the OIDC claims of a user after ... |
| CVE-2021-41228 | HIGH | 7.8 | 0.2% | Nov 5, 2021 | TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's `saved_model_cli` tool is ... |
| CVE-2021-41227 | MEDIUM | 5.5 | 0.2% | Nov 5, 2021 | TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in Tenso... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now