2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39412 | MEDIUM | 6.1 | 0.6% | Nov 5, 2021 | Multiple Cross Site Scripting (XSS) vulnerabilities exists in PHPGurukul Shopping v3.1 via the (1) callback parameter in... |
| CVE-2021-39411 | MEDIUM | 6.1 | 0.9% | Nov 5, 2021 | Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searc... |
| CVE-2021-42671 | HIGH | 7.5 | 19.7% | Nov 5, 2021 | An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitorin... |
| CVE-2021-42670 | CRITICAL | 9.8 | 8.3% | Nov 5, 2021 | A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announ... |
| CVE-2021-42669 | CRITICAL | 9.8 | 23.3% | Nov 5, 2021 | A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which all... |
| CVE-2021-42668 | CRITICAL | 9.8 | 4.7% | Nov 5, 2021 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_cla... |
| CVE-2021-42667 | CRITICAL | 9.8 | 15.8% | Nov 5, 2021 | A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-manag... |
| CVE-2021-42666 | HIGH | 8.8 | 4.4% | Nov 5, 2021 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_quest... |
| CVE-2021-42665 | CRITICAL | 9.8 | 4.9% | Nov 5, 2021 | An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of inde... |
| CVE-2021-42664 | MEDIUM | 5.4 | 1.6% | Nov 5, 2021 | A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Q... |
| CVE-2021-42663 | MEDIUM | 4.3 | 3.8% | Nov 5, 2021 | An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via th... |
| CVE-2021-42662 | MEDIUM | 5.4 | 1.6% | Nov 5, 2021 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System i... |
| CVE-2021-26844 | MEDIUM | 5.4 | 0.7% | Nov 5, 2021 | A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject ar... |
| CVE-2021-42237 | CRITICAL | 9.8 | 97.9% | Nov 5, 2021 | Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it... |
| CVE-2021-25509 | HIGH | 7.1 | 0.2% | Nov 5, 2021 | A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite ab... |
| CVE-2021-25508 | CRITICAL | 9.8 | 0.8% | Nov 5, 2021 | Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abus... |
| CVE-2021-25507 | MEDIUM | 5.7 | 0.3% | Nov 5, 2021 | Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC applica... |
| CVE-2021-25506 | MEDIUM | 5.5 | 0.2% | Nov 5, 2021 | Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider... |
| CVE-2021-25505 | HIGH | 7.8 | 0.6% | Nov 5, 2021 | Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is un... |
| CVE-2021-25504 | MEDIUM | 4 | 0.2% | Nov 5, 2021 | Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information. |
| CVE-2021-25503 | MEDIUM | 6.7 | 0.1% | Nov 5, 2021 | Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execu... |
| CVE-2021-25502 | MEDIUM | 5.5 | 0.1% | Nov 5, 2021 | A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows ... |
| CVE-2021-25501 | LOW | 3.3 | 0.1% | Nov 5, 2021 | An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 al... |
| CVE-2021-25500 | MEDIUM | 4.4 | 0.1% | Nov 5, 2021 | A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE... |
| CVE-2021-39913 | MEDIUM | 6.7 | 0.3% | Nov 5, 2021 | Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now