2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29643 | MEDIUM | 5.4 | 0.6% | Sep 13, 2021 | PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a co... |
| CVE-2021-32137 | MEDIUM | 5.5 | 1.1% | Sep 13, 2021 | Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of s... |
| CVE-2021-32134 | MEDIUM | 5.5 | 0.8% | Sep 13, 2021 | The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via... |
| CVE-2021-32136 | HIGH | 7.8 | 1.4% | Sep 13, 2021 | Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or... |
| CVE-2021-40214 | MEDIUM | 5.4 | 0.7% | Sep 13, 2021 | Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component. |
| CVE-2021-22528 | MEDIUM | 5.4 | 0.6% | Sep 13, 2021 | Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-22527 | HIGH | 7.5 | 0.7% | Sep 13, 2021 | Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-22526 | MEDIUM | 6.1 | 0.5% | Sep 13, 2021 | Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-22524 | MEDIUM | 4.9 | 0.6% | Sep 13, 2021 | Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-40870 | CRITICAL | 9.8 | 92.4% | Sep 13, 2021 | An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous ... |
| CVE-2021-40867 | HIGH | 7.1 | 1.4% | Sep 13, 2021 | Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenti... |
| CVE-2021-40866 | HIGH | 8.8 | 1.7% | Sep 13, 2021 | Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (di... |
| CVE-2021-23435 | MEDIUM | 6.1 | 0.7% | Sep 12, 2021 | This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value ... |
| CVE-2021-23440 | CRITICAL | 9.8 | 2.3% | Sep 12, 2021 | This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of... |
| CVE-2021-40146 | CRITICAL | 9.8 | 5.5% | Sep 11, 2021 | A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect A... |
| CVE-2021-38555 | CRITICAL | 9.1 | 2.7% | Sep 11, 2021 | An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to a... |
| CVE-2021-39207 | HIGH | 8.8 | 1.7% | Sep 10, 2021 | parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affec... |
| CVE-2021-24040 | CRITICAL | 9.8 | 17.4% | Sep 10, 2021 | Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files c... |
| CVE-2021-40864 | CRITICAL | 9.8 | 2.2% | Sep 10, 2021 | The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.d... |
| CVE-2021-40347 | MEDIUM | 5.4 | 1.1% | Sep 10, 2021 | An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) ca... |
| CVE-2021-3145 | MEDIUM | 6.7 | 0.5% | Sep 10, 2021 | In Ionic Identity Vault before 5, a local root attacker on an Android device can bypass biometric authentication. |
| CVE-2021-3646 | MEDIUM | 6.1 | 0.7% | Sep 10, 2021 | btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-37422 | CRITICAL | 9.8 | 3.3% | Sep 10, 2021 | Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases. |
| CVE-2021-37423 | CRITICAL | 9.8 | 2.7% | Sep 10, 2021 | Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover. |
| CVE-2021-37418 | — | — | — | Sep 10, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-31874. Reason: This candidate is a reservation d... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now