2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24581 | HIGH | 8.8 | 4.1% | Aug 30, 2021 | The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting ... |
| CVE-2021-24580 | HIGH | 8.8 | 1.4% | Aug 30, 2021 | The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard ... |
| CVE-2021-24579 | HIGH | 8.8 | 8.2% | Aug 30, 2021 | The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unseria... |
| CVE-2021-24528 | MEDIUM | 5.4 | 0.6% | Aug 30, 2021 | The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, n... |
| CVE-2021-24438 | MEDIUM | 6.1 | 0.8% | Aug 30, 2021 | The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' p... |
| CVE-2021-24437 | MEDIUM | 6.1 | 0.8% | Aug 30, 2021 | The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter bef... |
| CVE-2021-25958 | HIGH | 7.5 | 2.6% | Aug 30, 2021 | In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations ... |
| CVE-2021-39117 | MEDIUM | 4.8 | 0.6% | Aug 30, 2021 | The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers ... |
| CVE-2021-39113 | HIGH | 7.5 | 1.8% | Aug 30, 2021 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached c... |
| CVE-2021-39111 | MEDIUM | 6.1 | 1.0% | Aug 30, 2021 | The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from ve... |
| CVE-2021-26084 | CRITICAL | 9.8 | 100.0% | Aug 30, 2021 | In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un... |
| CVE-2021-39272 | MEDIUM | 5.9 | 0.9% | Aug 30, 2021 | Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation ... |
| CVE-2021-39271 | HIGH | 8.8 | 3.7% | Aug 30, 2021 | OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attack... |
| CVE-2021-38385 | HIGH | 7.5 | 1.7% | Aug 30, 2021 | Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-s... |
| CVE-2021-36359 | HIGH | 8.8 | 4.0% | Aug 30, 2021 | OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection beca... |
| CVE-2021-37749 | CRITICAL | 9.8 | 1.8% | Aug 30, 2021 | MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (wi... |
| CVE-2021-40178 | MEDIUM | 6.1 | 0.8% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings. |
| CVE-2021-40177 | CRITICAL | 9.8 | 4.6% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite. |
| CVE-2021-40176 | MEDIUM | 6.1 | 0.8% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5225 allows stored XSS. |
| CVE-2021-40175 | CRITICAL | 9.8 | 7.0% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution. |
| CVE-2021-40174 | HIGH | 8.8 | 1.0% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings. |
| CVE-2021-40173 | HIGH | 8.8 | 1.0% | Aug 29, 2021 | Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings. |
| CVE-2021-40172 | HIGH | 8.8 | 1.0% | Aug 29, 2021 | Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings. |
| CVE-2021-38154 | HIGH | 7.5 | 4.0% | Aug 29, 2021 | Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server ... |
| CVE-2021-39174 | HIGH | 8.8 | 3.9% | Aug 28, 2021 | Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now