2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36608 | MEDIUM | 5.4 | 0.4% | Jun 16, 2022 | Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php. |
| CVE-2021-33295 | MEDIUM | 5.4 | 0.8% | Jun 16, 2022 | Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code du... |
| CVE-2021-36827 | MEDIUM | 4.8 | 0.5% | Jun 16, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.... |
| CVE-2021-41421 | MEDIUM | 4.8 | 0.5% | Jun 16, 2022 | A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the Maia... |
| CVE-2021-41420 | MEDIUM | 5.4 | 0.7% | Jun 16, 2022 | A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execut... |
| CVE-2021-41458 | MEDIUM | 5.5 | 0.6% | Jun 16, 2022 | In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vul... |
| CVE-2021-41415 | MEDIUM | 6.1 | 0.6% | Jun 15, 2022 | Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter. |
| CVE-2021-36891 | MEDIUM | 4.3 | 0.4% | Jun 15, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows chang... |
| CVE-2021-40776 | MEDIUM | 6.1 | 0.5% | Jun 15, 2022 | Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom... |
| CVE-2021-41672 | MEDIUM | 6.5 | 1.4% | Jun 15, 2022 | PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the adm... |
| CVE-2021-40910 | MEDIUM | 6.1 | 0.6% | Jun 15, 2022 | There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side. |
| CVE-2021-36901 | MEDIUM | 6.1 | 0.7% | Jun 15, 2022 | Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Phil Baker's Age Gate plugin <= 2.17.0 at WordPress. |
| CVE-2021-40678 | MEDIUM | 5.4 | 0.5% | Jun 14, 2022 | In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=bat... |
| CVE-2021-40658 | MEDIUM | 4.8 | 0.5% | Jun 14, 2022 | Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”. |
| CVE-2021-40650 | MEDIUM | 6.5 | 0.7% | Jun 14, 2022 | In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set. |
| CVE-2021-40649 | MEDIUM | 6.5 | 0.8% | Jun 14, 2022 | In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set. |
| CVE-2021-40616 | MEDIUM | 6.5 | 0.7% | Jun 14, 2022 | thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account wit... |
| CVE-2021-35121 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx dr... |
| CVE-2021-35120 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | Improper handling between export and release functions on the same handle from client can lead to use after free in Snap... |
| CVE-2021-35119 | MEDIUM | 5.5 | 0.1% | Jun 14, 2022 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snap... |
| CVE-2021-35118 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Com... |
| CVE-2021-35111 | MEDIUM | 5.9 | 0.4% | Jun 14, 2022 | Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivi... |
| CVE-2021-35101 | MEDIUM | 6.5 | 0.1% | Jun 14, 2022 | Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, ... |
| CVE-2021-35098 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co... |
| CVE-2021-35092 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now