2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34354 | MEDIUM | 5.4 | 0.6% | Oct 1, 2021 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, ... |
| CVE-2021-34352 | CRITICAL | 9.8 | 1.5% | Oct 1, 2021 | A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability ... |
| CVE-2021-33626 | HIGH | 7.8 | 0.3% | Oct 1, 2021 | A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently ... |
| CVE-2021-41324 | MEDIUM | 6.5 | 2.1% | Sep 30, 2021 | Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enu... |
| CVE-2021-41101 | MEDIUM | 5.7 | 0.7% | Sep 30, 2021 | wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS ` Acc... |
| CVE-2021-33583 | CRITICAL | 9.8 | 1.2% | Sep 30, 2021 | REINER timeCard 6.05.07 installs a Microsoft SQL Server with an sa password that is hardcoded in the TCServer.jar file. |
| CVE-2021-41325 | MEDIUM | 6.5 | 1.1% | Sep 30, 2021 | Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via ... |
| CVE-2021-41323 | MEDIUM | 6.5 | 2.0% | Sep 30, 2021 | Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal... |
| CVE-2021-41288 | CRITICAL | 9.8 | 79.6% | Sep 30, 2021 | Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API. |
| CVE-2021-35205 | MEDIUM | 5.4 | 0.4% | Sep 30, 2021 | NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector. |
| CVE-2021-35204 | MEDIUM | 5.4 | 0.5% | Sep 30, 2021 | NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting (XSS) in the support endpoint. |
| CVE-2021-35203 | MEDIUM | 5.7 | 0.7% | Sep 30, 2021 | NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint. |
| CVE-2021-35202 | MEDIUM | 4.3 | 0.6% | Sep 30, 2021 | NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass (to access an endpoint) in FDSQueryService. |
| CVE-2021-35201 | MEDIUM | 6.5 | 0.9% | Sep 30, 2021 | NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks. |
| CVE-2021-35200 | MEDIUM | 4.8 | 0.4% | Sep 30, 2021 | NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting (XSS) in FDSQue... |
| CVE-2021-35199 | MEDIUM | 5.4 | 0.5% | Sep 30, 2021 | NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting (XSS) in UploadFile. |
| CVE-2021-35198 | MEDIUM | 5.4 | 0.5% | Sep 30, 2021 | NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting (XSS) in the Packet Analysis module. |
| CVE-2021-29894 | HIGH | 7.5 | 0.7% | Sep 30, 2021 | IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorit... |
| CVE-2021-20578 | CRITICAL | 9.8 | 1.0% | Sep 30, 2021 | IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized... |
| CVE-2021-20554 | MEDIUM | 6.1 | 0.6% | Sep 30, 2021 | IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2021-24017 | MEDIUM | 4.3 | 0.5% | Sep 30, 2021 | An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign a... |
| CVE-2021-24016 | MEDIUM | 6.3 | 0.5% | Sep 30, 2021 | An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and... |
| CVE-2021-41109 | HIGH | 7.5 | 1.2% | Sep 30, 2021 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version... |
| CVE-2021-21089 | LOW | 3.3 | 1.8% | Sep 30, 2021 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e... |
| CVE-2021-41720 | — | — | — | Sep 30, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now