2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-36309MEDIUM6.5Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An auth...
CVE-2021-36298CRITICAL9.8Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unaut...
CVE-2021-41845MEDIUM6.5A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions ar...
CVE-2021-38104MEDIUM5.5IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a craf...
CVE-2021-38103HIGH7.8IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a cra...
CVE-2021-38099HIGH7.8CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing...
CVE-2021-38096HIGH7.8Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. ...
CVE-2021-38097HIGH7.8Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthentic...
CVE-2021-41467MEDIUM6.1Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow rem...
CVE-2021-41465MEDIUM6.1Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below...
CVE-2021-41464MEDIUM6.1Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below a...
CVE-2021-41463MEDIUM6.1Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concre...
CVE-2021-41462MEDIUM6.1Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below a...
CVE-2021-41461MEDIUM6.1Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below a...
CVE-2021-40975MEDIUM6.1Cross-site scripting (XSS) vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgni...
CVE-2021-40973MEDIUM6.1Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote...
CVE-2021-40972MEDIUM6.1Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote...
CVE-2021-40971MEDIUM6.1Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote...
CVE-2021-40970MEDIUM6.1Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote...
CVE-2021-40969MEDIUM6.1Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote...
CVE-2021-40968MEDIUM6.1Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote...
CVE-2021-40928MEDIUM6.1Cross-site scripting (XSS) vulnerability in index.php in FlexTV beta development version allows remote attackers to inje...
CVE-2021-40927MEDIUM6.1Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers ...
CVE-2021-40926MEDIUM6.1Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers ...
CVE-2021-40925MEDIUM6.1Cross-site scripting (XSS) vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0 and below allow remote a...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now