2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38871 | MEDIUM | 5.4 | 0.5% | Jun 24, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2021-29865 | MEDIUM | 5.4 | 0.6% | Jun 24, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action o... |
| CVE-2021-20544 | MEDIUM | 4.3 | 0.5% | Jun 24, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may... |
| CVE-2021-20543 | MEDIUM | 5.4 | 0.6% | Jun 24, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection. A remote attacker could inje... |
| CVE-2021-20421 | MEDIUM | 4.3 | 0.5% | Jun 24, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may... |
| CVE-2021-20355 | MEDIUM | 5.3 | 1.0% | Jun 24, 2022 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information... |
| CVE-2021-39047 | MEDIUM | 6.1 | 0.8% | Jun 24, 2022 | IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. T... |
| CVE-2021-29768 | MEDIUM | 6.5 | 0.9% | Jun 24, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the de... |
| CVE-2021-30651 | MEDIUM | 4.9 | 0.7% | Jun 24, 2022 | A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that th... |
| CVE-2021-41639 | MEDIUM | 5.5 | 0.2% | Jun 24, 2022 | MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file. |
| CVE-2021-41636 | MEDIUM | 6.5 | 1.3% | Jun 24, 2022 | MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and op... |
| CVE-2021-41634 | MEDIUM | 5.3 | 0.9% | Jun 24, 2022 | A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames. |
| CVE-2021-46824 | MEDIUM | 5.4 | 0.9% | Jun 23, 2022 | Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter ... |
| CVE-2021-41432 | MEDIUM | 5.4 | 1.7% | Jun 23, 2022 | A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaS... |
| CVE-2021-29055 | MEDIUM | 6.1 | 0.8% | Jun 23, 2022 | Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Firtstname paramete... |
| CVE-2021-36761 | MEDIUM | 5.3 | 1.1% | Jun 21, 2022 | The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF. |
| CVE-2021-39006 | MEDIUM | 5.3 | 0.8% | Jun 21, 2022 | IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best ... |
| CVE-2021-41924 | MEDIUM | 6.1 | 0.6% | Jun 21, 2022 | Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2021-25121 | MEDIUM | 6.5 | 1.2% | Jun 20, 2022 | The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of lon... |
| CVE-2021-25104 | MEDIUM | 6.1 | 1.4% | Jun 20, 2022 | The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is ac... |
| CVE-2021-25088 | MEDIUM | 4.8 | 0.6% | Jun 20, 2022 | The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug... |
| CVE-2021-46823 | MEDIUM | 6.5 | 1.7% | Jun 18, 2022 | python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions,... |
| CVE-2021-46822 | MEDIUM | 5.5 | 1.0% | Jun 18, 2022 | The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a... |
| CVE-2021-45026 | MEDIUM | 6.1 | 1.5% | Jun 17, 2022 | ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2021-36609 | MEDIUM | 5.4 | 0.4% | Jun 16, 2022 | Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now