2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30086 | MEDIUM | 6.1 | 0.7% | Sep 28, 2021 | Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an at... |
| CVE-2021-41318 | MEDIUM | 6.1 | 5.9% | Sep 28, 2021 | In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input.... |
| CVE-2021-37273 | HIGH | 7.5 | 0.9% | Sep 28, 2021 | A Denial of Service issue exists in China Telecom Corporation EPON Tianyi Gateway ZXHN F450(EPON ONU) 3.0. Tianyi Gatewa... |
| CVE-2021-36366 | CRITICAL | 9.8 | 3.9% | Sep 28, 2021 | Nagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards. |
| CVE-2021-36365 | CRITICAL | 9.8 | 3.7% | Sep 28, 2021 | Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh. |
| CVE-2021-36364 | CRITICAL | 9.8 | 3.9% | Sep 28, 2021 | Nagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards. |
| CVE-2021-36363 | CRITICAL | 9.8 | 3.7% | Sep 28, 2021 | Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php. |
| CVE-2021-41104 | HIGH | 7.5 | 1.2% | Sep 28, 2021 | ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configured on versi... |
| CVE-2021-29367 | HIGH | 7.8 | 0.9% | Sep 28, 2021 | A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted... |
| CVE-2021-29366 | HIGH | 7.8 | 0.9% | Sep 28, 2021 | A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary ... |
| CVE-2021-29365 | MEDIUM | 5.5 | 0.6% | Sep 28, 2021 | Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. T... |
| CVE-2021-29364 | HIGH | 7.8 | 1.0% | Sep 28, 2021 | A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code... |
| CVE-2021-29363 | HIGH | 7.8 | 1.0% | Sep 28, 2021 | A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code ... |
| CVE-2021-29362 | HIGH | 7.8 | 1.0% | Sep 28, 2021 | A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code ... |
| CVE-2021-29361 | HIGH | 7.8 | 1.0% | Sep 28, 2021 | A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary c... |
| CVE-2021-29360 | HIGH | 7.8 | 1.0% | Sep 28, 2021 | A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary c... |
| CVE-2021-29358 | MEDIUM | 5.5 | 0.6% | Sep 28, 2021 | A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to cause a denial of servic... |
| CVE-2021-37106 | HIGH | 7.2 | 0.9% | Sep 28, 2021 | There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when pro... |
| CVE-2021-37105 | HIGH | 7.5 | 0.6% | Sep 28, 2021 | There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper veri... |
| CVE-2021-37104 | HIGH | 7.5 | 0.6% | Sep 28, 2021 | There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability ... |
| CVE-2021-38124 | CRITICAL | 9.8 | 2.0% | Sep 28, 2021 | Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting version... |
| CVE-2021-34636 | HIGH | 8.8 | 0.6% | Sep 28, 2021 | The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the... |
| CVE-2021-22535 | MEDIUM | 4.9 | 0.7% | Sep 28, 2021 | Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) pro... |
| CVE-2021-37146 | HIGH | 7.5 | 1.9% | Sep 28, 2021 | An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 all... |
| CVE-2021-41540 | HIGH | 7.8 | 1.1% | Sep 28, 2021 | A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now