2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38331 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The WP-T-Wap WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the posted parameter found in the ~/wa... |
| CVE-2021-38330 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Yet Another bol.com Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SER... |
| CVE-2021-38329 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SE... |
| CVE-2021-38328 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Notices WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] val... |
| CVE-2021-38327 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The YouTube Video Inserter WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER[... |
| CVE-2021-38326 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Post Title Counter WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found i... |
| CVE-2021-35976 | MEDIUM | 6.1 | 1.1% | Sep 10, 2021 | The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via th... |
| CVE-2021-33011 | MEDIUM | 4.3 | 0.4% | Sep 10, 2021 | All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series, TOYOPUC-Nano Series prod... |
| CVE-2021-3645 | CRITICAL | 9.8 | 1.4% | Sep 10, 2021 | merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
| CVE-2021-34346 | CRITICAL | 9.8 | 1.5% | Sep 10, 2021 | A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploite... |
| CVE-2021-34345 | CRITICAL | 9.8 | 1.5% | Sep 10, 2021 | A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploite... |
| CVE-2021-34344 | CRITICAL | 9.8 | 1.5% | Sep 10, 2021 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulne... |
| CVE-2021-34343 | HIGH | 7.2 | 1.9% | Sep 10, 2021 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If expl... |
| CVE-2021-28816 | HIGH | 8.8 | 0.9% | Sep 10, 2021 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If expl... |
| CVE-2021-28813 | HIGH | 7.5 | 1.1% | Sep 10, 2021 | A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP... |
| CVE-2021-40839 | HIGH | 7.5 | 5.4% | Sep 10, 2021 | The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabl... |
| CVE-2021-39206 | HIGH | 8.6 | 1.4% | Sep 9, 2021 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization re... |
| CVE-2021-39204 | HIGH | 7.5 | 1.6% | Sep 9, 2021 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting... |
| CVE-2021-39203 | MEDIUM | 6.5 | 0.9% | Sep 9, 2021 | WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database... |
| CVE-2021-39202 | MEDIUM | 5.4 | 0.8% | Sep 9, 2021 | WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database... |
| CVE-2021-39201 | MEDIUM | 5.4 | 1.5% | Sep 9, 2021 | WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database... |
| CVE-2021-39200 | MEDIUM | 5.3 | 2.1% | Sep 9, 2021 | WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database... |
| CVE-2021-39162 | HIGH | 8.6 | 1.6% | Sep 9, 2021 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if a... |
| CVE-2021-32724 | CRITICAL | 9.9 | 2.3% | Sep 9, 2021 | check-spelling is a github action which provides CI spell checking. In affected versions and for a repository with the [... |
| CVE-2021-38325 | MEDIUM | 6.1 | 0.9% | Sep 9, 2021 | The User Activation Email WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the uae-key parameter fou... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now