2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28135 | MEDIUM | 6.5 | 0.8% | Sep 7, 2021 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of cont... |
| CVE-2021-33484 | HIGH | 7.5 | 0.9% | Sep 7, 2021 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the in... |
| CVE-2021-33483 | MEDIUM | 5.4 | 0.6% | Sep 7, 2021 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows ... |
| CVE-2021-40540 | CRITICAL | 9.8 | 2.5% | Sep 7, 2021 | ulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omits con_info initialization and a con_info->request NULL check... |
| CVE-2021-40532 | CRITICAL | 9.8 | 1.1% | Sep 6, 2021 | Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension. |
| CVE-2021-40531 | CRITICAL | 9.8 | 32.8% | Sep 6, 2021 | Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opene... |
| CVE-2021-40530 | MEDIUM | 5.9 | 1.1% | Sep 6, 2021 | The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cry... |
| CVE-2021-40529 | MEDIUM | 5.9 | 1.5% | Sep 6, 2021 | The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery... |
| CVE-2021-40528 | MEDIUM | 5.9 | 1.3% | Sep 6, 2021 | The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two c... |
| CVE-2021-24006 | HIGH | 8.8 | 0.9% | Sep 6, 2021 | An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker wit... |
| CVE-2021-36096 | MEDIUM | 4.9 | 0.4% | Sep 6, 2021 | Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: O... |
| CVE-2021-36095 | MEDIUM | 5.3 | 0.9% | Sep 6, 2021 | Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS ... |
| CVE-2021-36094 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OT... |
| CVE-2021-36093 | MEDIUM | 5.3 | 1.1% | Sep 6, 2021 | It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue... |
| CVE-2021-3770 | HIGH | 7.8 | 0.7% | Sep 6, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-3768 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-3767 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-3766 | CRITICAL | 9.8 | 1.4% | Sep 6, 2021 | objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
| CVE-2021-36744 | HIGH | 7.8 | 0.5% | Sep 6, 2021 | Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an ... |
| CVE-2021-32568 | HIGH | 7.8 | 0.8% | Sep 6, 2021 | mrdoc is vulnerable to Deserialization of Untrusted Data |
| CVE-2021-25737 | MEDIUM | 4.8 | 1.3% | Sep 6, 2021 | A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a ... |
| CVE-2021-25735 | MEDIUM | 6.5 | 5.2% | Sep 6, 2021 | A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook... |
| CVE-2021-24611 | MEDIUM | 5.4 | 0.3% | Sep 6, 2021 | The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in th... |
| CVE-2021-24603 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an ... |
| CVE-2021-24601 | MEDIUM | 5.4 | 0.6% | Sep 6, 2021 | The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, whi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now