2021 CVE Vulnerabilities

23,473 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-47778HIGH7.2GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator c...
CVE-2021-47770HIGH8.8OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to...
CVE-2021-47746HIGH8.6NodeBB Plugin Emoji 3.2.1 contains an arbitrary file write vulnerability that allows administrative users to write files...
CVE-2021-47847HIGH8.5Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows ...
CVE-2021-47845HIGH8.5Spy Emergency 25.0.650 contains an unquoted service path vulnerability in its Windows service configurations that allows...
CVE-2021-47842HIGH7.2StudyMD 0.3.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts...
CVE-2021-47840HIGH7.2Moeditor 0.2.0 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payload...
CVE-2021-47839HIGH7.2Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts i...
CVE-2021-47838HIGH7.2Markright 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to embed malicious payloads...
CVE-2021-47837HIGH7.2Markdownify 1.2.0 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payl...
CVE-2021-47835HIGH7.2Freeter 1.2.1 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payloads...
CVE-2021-47833HIGH8.5WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in its WifiHotSpotService.exe that allows local atta...
CVE-2021-47831HIGH7.5Sandboxie 5.49.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowin...
CVE-2021-47829HIGH8.5DHCP Broadband 4.1.0.1503 contains an unquoted service path vulnerability in its service configuration that allows local...
CVE-2021-47828HIGH8.5BOOTP Turbo 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. Attackers c...
CVE-2021-47827HIGH7.5WebSSH for iOS 14.16.10 contains a denial of service vulnerability in the mashREPL tool that allows attackers to crash t...
CVE-2021-47826HIGH8.5Acer Backup Manager 3.0.0.99 contains an unquoted service path vulnerability in the NTI IScheduleSvc service that allows...
CVE-2021-47825HIGH8.5Acer Updater Service 1.2.3500.0 contains an unquoted service path vulnerability that allows local users to execute code ...
CVE-2021-47824HIGH7.5iDailyDiary 4.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowin...
CVE-2021-47823HIGH8.5Acer ePowerSvc 6.0.3008.0 contains an unquoted service path vulnerability that allows local users to potentially execute...
CVE-2021-47822HIGH8.5DiskBoss Service 12.2.18 contains an unquoted service path vulnerability in its binary path configuration that allows lo...
CVE-2021-47821HIGH7.5RarmaRadio 2.72.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowi...
CVE-2021-47818HIGH7.5DupTerminator 1.4.5639.37199 contains a denial of service vulnerability that allows attackers to crash the application b...
CVE-2021-47816HIGH8.8Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers ...
CVE-2021-47815HIGH7.5Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now