2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40924 | MEDIUM | 6.1 | 0.8% | Oct 1, 2021 | Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to i... |
| CVE-2021-40923 | MEDIUM | 6.1 | 0.8% | Oct 1, 2021 | Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to i... |
| CVE-2021-40922 | MEDIUM | 6.1 | 0.8% | Oct 1, 2021 | Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to i... |
| CVE-2021-40921 | MEDIUM | 6.1 | 0.7% | Oct 1, 2021 | Cross-site scripting (XSS) vulnerability in _contactform.inc.php in Detector 0.8.5 and below version allows remote attac... |
| CVE-2021-41647 | CRITICAL | 9.1 | 1.9% | Oct 1, 2021 | An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Or... |
| CVE-2021-3825 | CRITICAL | 9.6 | 1.6% | Oct 1, 2021 | On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. ... |
| CVE-2021-29110 | MEDIUM | 5.4 | 0.6% | Oct 1, 2021 | Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass an... |
| CVE-2021-29109 | MEDIUM | 6.1 | 0.7% | Oct 1, 2021 | A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 and below may allow a remote attacker able to convi... |
| CVE-2021-29108 | HIGH | 8.8 | 0.8% | Oct 1, 2021 | There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 a... |
| CVE-2021-41649 | CRITICAL | 9.8 | 51.8% | Oct 1, 2021 | An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php c... |
| CVE-2021-41648 | HIGH | 7.5 | 10.0% | Oct 1, 2021 | An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId ... |
| CVE-2021-40960 | CRITICAL | 9.8 | 9.8% | Oct 1, 2021 | Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd... |
| CVE-2021-41110 | CRITICAL | 9.8 | 2.7% | Oct 1, 2021 | cwlviewer is a web application to view and share Common Workflow Language workflows. Versions prior to 1.3.1 contain a D... |
| CVE-2021-35297 | HIGH | 7.8 | 1.2% | Oct 1, 2021 | Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a crafted DBF file that trig... |
| CVE-2021-41459 | HIGH | 7.5 | 1.2% | Oct 1, 2021 | There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function s... |
| CVE-2021-41457 | HIGH | 7.5 | 1.2% | Oct 1, 2021 | There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a deni... |
| CVE-2021-41456 | HIGH | 7.5 | 1.2% | Oct 1, 2021 | There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function s... |
| CVE-2021-23893 | HIGH | 7.8 | 0.1% | Oct 1, 2021 | Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow... |
| CVE-2021-3747 | HIGH | 7.8 | 0.2% | Oct 1, 2021 | The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with inc... |
| CVE-2021-3710 | MEDIUM | 5.5 | 0.4% | Oct 1, 2021 | An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affe... |
| CVE-2021-3709 | MEDIUM | 5.5 | 0.4% | Oct 1, 2021 | Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data ... |
| CVE-2021-3626 | HIGH | 8.8 | 0.2% | Oct 1, 2021 | The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket t... |
| CVE-2021-38675 | MEDIUM | 5.4 | 0.6% | Oct 1, 2021 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this... |
| CVE-2021-34356 | MEDIUM | 5.4 | 0.6% | Oct 1, 2021 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, ... |
| CVE-2021-34355 | MEDIUM | 5.4 | 0.6% | Oct 1, 2021 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, thi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now