2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33545 | HIGH | 7.2 | 2.7% | Sep 13, 2021 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow ... |
| CVE-2021-33544 | HIGH | 7.2 | 94.6% | Sep 13, 2021 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a... |
| CVE-2021-33543 | CRITICAL | 9.8 | 82.1% | Sep 13, 2021 | Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive... |
| CVE-2021-24728 | HIGH | 8.8 | 1.7% | Sep 13, 2021 | The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validat... |
| CVE-2021-24727 | HIGH | 8.8 | 1.7% | Sep 13, 2021 | The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of i... |
| CVE-2021-24726 | HIGH | 8.8 | 1.5% | Sep 13, 2021 | The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter ... |
| CVE-2021-24725 | MEDIUM | 4.3 | 0.5% | Sep 13, 2021 | The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete co... |
| CVE-2021-24724 | MEDIUM | 5.4 | 0.9% | Sep 13, 2021 | The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, w... |
| CVE-2021-24623 | MEDIUM | 4.8 | 0.6% | Sep 13, 2021 | The WordPress Advanced Ticket System, Elite Support Helpdesk WordPress plugin before 1.0.64 does not sanitize or escape ... |
| CVE-2021-24621 | MEDIUM | 4.8 | 0.6% | Sep 13, 2021 | The WP Courses LMS WordPress plugin before 2.0.44 does not sanitise its Video Embed Code, allowing malicious code to be ... |
| CVE-2021-24620 | HIGH | 8.8 | 0.6% | Sep 13, 2021 | The WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin through 2.2.5 does not check fo... |
| CVE-2021-24619 | MEDIUM | 4.8 | 0.6% | Sep 13, 2021 | The Per page add to head WordPress plugin through 1.4.4 does not properly sanitise one of its setting, allowing maliciou... |
| CVE-2021-24614 | MEDIUM | 4.8 | 0.6% | Sep 13, 2021 | The Book appointment online WordPress plugin before 1.39 does not sanitise or escape Service Prices before outputting it... |
| CVE-2021-24605 | MEDIUM | 5.4 | 0.6% | Sep 13, 2021 | The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenti... |
| CVE-2021-24586 | MEDIUM | 4.3 | 0.5% | Sep 13, 2021 | The Per page add to head WordPress plugin before 1.4.4 is lacking any CSRF check when saving its settings, which could a... |
| CVE-2021-24560 | MEDIUM | 6.1 | 0.7% | Sep 13, 2021 | The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the edit_record parameter before ... |
| CVE-2021-24523 | MEDIUM | 5.4 | 0.6% | Sep 13, 2021 | The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputt... |
| CVE-2021-24510 | MEDIUM | 6.1 | 2.3% | Sep 13, 2021 | The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back... |
| CVE-2021-24508 | MEDIUM | 6.1 | 1.3% | Sep 13, 2021 | The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter ... |
| CVE-2021-24493 | CRITICAL | 9.8 | 1.9% | Sep 13, 2021 | The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authe... |
| CVE-2021-24491 | HIGH | 8.8 | 0.7% | Sep 13, 2021 | The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload an... |
| CVE-2021-24490 | MEDIUM | 6.8 | 0.5% | Sep 13, 2021 | The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import... |
| CVE-2021-24431 | MEDIUM | 4.3 | 0.5% | Sep 13, 2021 | The Language Bar Flags WordPress plugin through 1.0.8 does not have any CSRF in place when saving its settings and did n... |
| CVE-2021-32135 | MEDIUM | 5.5 | 0.8% | Sep 13, 2021 | The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a ... |
| CVE-2021-32132 | MEDIUM | 5.5 | 0.8% | Sep 13, 2021 | The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now