2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43130 | CRITICAL | 9.8 | 2.2% | Nov 3, 2021 | An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the userna... |
| CVE-2021-36698 | MEDIUM | 5.4 | 0.7% | Nov 3, 2021 | Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name. |
| CVE-2021-36697 | MEDIUM | 6.7 | 0.4% | Nov 3, 2021 | With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component... |
| CVE-2021-40849 | CRITICAL | 9.8 | 1.3% | Nov 3, 2021 | In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web services token is vulnerable ... |
| CVE-2021-40848 | HIGH | 7.8 | 1.0% | Nov 3, 2021 | In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet ... |
| CVE-2021-36192 | LOW | 3.8 | 0.2% | Nov 3, 2021 | An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6... |
| CVE-2021-33209 | MEDIUM | 5.3 | 0.7% | Nov 3, 2021 | An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether ... |
| CVE-2021-33210 | MEDIUM | 4.3 | 0.8% | Nov 3, 2021 | An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information w... |
| CVE-2021-41312 | HIGH | 7.5 | 1.2% | Nov 3, 2021 | Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from... |
| CVE-2021-39238 | CRITICAL | 9.8 | 12.1% | Nov 3, 2021 | Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnera... |
| CVE-2021-39237 | MEDIUM | 4.6 | 2.4% | Nov 3, 2021 | Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential i... |
| CVE-2021-38502 | MEDIUM | 5.9 | 1.1% | Nov 3, 2021 | Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgr... |
| CVE-2021-38501 | HIGH | 8.8 | 1.0% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evi... |
| CVE-2021-38500 | HIGH | 8.8 | 1.2% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evi... |
| CVE-2021-38499 | HIGH | 8.8 | 0.8% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corru... |
| CVE-2021-38498 | HIGH | 7.5 | 1.4% | Nov 3, 2021 | During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory ... |
| CVE-2021-38497 | MEDIUM | 6.5 | 0.5% | Nov 3, 2021 | Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another o... |
| CVE-2021-38496 | HIGH | 8.8 | 1.6% | Nov 3, 2021 | During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corrup... |
| CVE-2021-38495 | HIGH | 8.8 | 1.1% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of mem... |
| CVE-2021-38494 | HIGH | 8.8 | 0.8% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corru... |
| CVE-2021-38493 | HIGH | 8.8 | 1.2% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed ev... |
| CVE-2021-38492 | MEDIUM | 6.5 | 1.1% | Nov 3, 2021 | When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to... |
| CVE-2021-38491 | MEDIUM | 6.5 | 0.9% | Nov 3, 2021 | Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerabil... |
| CVE-2021-29993 | HIGH | 8.1 | 0.7% | Nov 3, 2021 | Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI sp... |
| CVE-2021-29991 | HIGH | 8.1 | 0.9% | Nov 3, 2021 | Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now