2021 CVE Vulnerabilities

23,445 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-33447MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer de...
CVE-2021-33446MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer de...
CVE-2021-33445MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer de...
CVE-2021-33444MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer de...
CVE-2021-33443MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer ov...
CVE-2021-33442MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer de...
CVE-2021-33441MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer de...
CVE-2021-33440MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer de...
CVE-2021-33439MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflo...
CVE-2021-33438MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer ov...
CVE-2021-33437MEDIUM5.5An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks i...
CVE-2021-43959MEDIUM5.7Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to ac...
CVE-2021-36200MEDIUM5.3Under certain circumstances an unauthenticated user could access the the web API for Metasys ADS/ADX/OAS 10 versions pri...
CVE-2021-36849MEDIUM4.8Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plu...
CVE-2021-38936MEDIUM4.9IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 2108...
CVE-2021-31858MEDIUM5.4DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography se...
CVE-2021-32504MEDIUM5.3Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users...
CVE-2021-38868MEDIUM6.5IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery wh...
CVE-2021-29799MEDIUM6.5IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain se...
CVE-2021-29790MEDIUM5.4IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vu...
CVE-2021-29788MEDIUM5.4IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vu...
CVE-2021-22131MEDIUM5.4A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet ...
CVE-2021-44170MEDIUM6.7A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiP...
CVE-2021-42755MEDIUM4.3An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; ...
CVE-2021-33656MEDIUM6.8When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now