2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30590 | HIGH | 8.8 | 2.8% | Aug 26, 2021 | Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially explo... |
| CVE-2021-40147 | CRITICAL | 9.8 | 1.1% | Aug 26, 2021 | EmTec ZOC before 8.02.2 allows \e[201~ pastes, a different vulnerability than CVE-2021-32198. |
| CVE-2021-32076 | MEDIUM | 5.3 | 1.2% | Aug 26, 2021 | Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access t... |
| CVE-2021-36352 | MEDIUM | 5.4 | 0.7% | Aug 26, 2021 | Stored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability h... |
| CVE-2021-3734 | HIGH | 8.8 | 0.4% | Aug 26, 2021 | yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames |
| CVE-2021-38559 | MEDIUM | 6.1 | 1.0% | Aug 26, 2021 | DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter. |
| CVE-2021-27944 | CRITICAL | 9.8 | 3.5% | Aug 26, 2021 | Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do not enforce access cont... |
| CVE-2021-20815 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movabl... |
| CVE-2021-20814 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable T... |
| CVE-2021-20813 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (Mo... |
| CVE-2021-20812 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and ... |
| CVE-2021-20811 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable ... |
| CVE-2021-20810 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Mova... |
| CVE-2021-20809 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r.... |
| CVE-2021-20808 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 S... |
| CVE-2021-20793 | HIGH | 7.8 | 0.3% | Aug 26, 2021 | Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP M... |
| CVE-2021-40145 | HIGH | 7.5 | 2.1% | Aug 26, 2021 | gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's pos... |
| CVE-2021-37334 | CRITICAL | 9.8 | 2.7% | Aug 25, 2021 | Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a r... |
| CVE-2021-37154 | CRITICAL | 9.8 | 1.4% | Aug 25, 2021 | In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a ... |
| CVE-2021-37153 | CRITICAL | 9.8 | 1.2% | Aug 25, 2021 | ForgeRock Access Management (AM) before 7.0.2, when configured with Active Directory as the Identity Store, has an authe... |
| CVE-2021-28070 | MEDIUM | 4.3 | 0.4% | Aug 25, 2021 | Cross Site Request Forgery (CSRF) vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete. |
| CVE-2021-1592 | MEDIUM | 4.3 | 1.0% | Aug 25, 2021 | A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker... |
| CVE-2021-1591 | MEDIUM | 5.3 | 1.0% | Aug 25, 2021 | A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthent... |
| CVE-2021-1590 | MEDIUM | 5.3 | 1.6% | Aug 25, 2021 | A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unau... |
| CVE-2021-1588 | HIGH | 8.6 | 1.5% | Aug 25, 2021 | A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now