2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39145 | HIGH | 8.5 | 4.1% | Aug 23, 2021 | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo... |
| CVE-2021-39144 | HIGH | 8.5 | 98.5% | Aug 23, 2021 | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo... |
| CVE-2021-39141 | HIGH | 8.5 | 16.1% | Aug 23, 2021 | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo... |
| CVE-2021-39139 | HIGH | 8.8 | 4.5% | Aug 23, 2021 | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo... |
| CVE-2021-29802 | HIGH | 7.5 | 0.6% | Aug 23, 2021 | IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creat... |
| CVE-2021-29704 | HIGH | 7.5 | 0.7% | Aug 23, 2021 | IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sens... |
| CVE-2021-3731 | MEDIUM | 4.7 | 1.1% | Aug 23, 2021 | LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This... |
| CVE-2021-3730 | MEDIUM | 6.5 | 0.5% | Aug 23, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3729 | MEDIUM | 4.3 | 0.4% | Aug 23, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3728 | MEDIUM | 6.5 | 0.5% | Aug 23, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3694 | CRITICAL | 9.6 | 2.4% | Aug 23, 2021 | LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an... |
| CVE-2021-3693 | CRITICAL | 9.6 | 3.0% | Aug 23, 2021 | LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL ... |
| CVE-2021-35465 | LOW | 3.4 | 0.3% | Aug 23, 2021 | Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-s... |
| CVE-2021-33598 | MEDIUM | 6.5 | 0.7% | Aug 23, 2021 | A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component u... |
| CVE-2021-24658 | MEDIUM | 4.8 | 0.7% | Aug 23, 2021 | The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing hi... |
| CVE-2021-24602 | HIGH | 8.8 | 1.5% | Aug 23, 2021 | The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set... |
| CVE-2021-24574 | MEDIUM | 4.8 | 0.7% | Aug 23, 2021 | The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privile... |
| CVE-2021-24571 | MEDIUM | 5.4 | 0.6% | Aug 23, 2021 | The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when g... |
| CVE-2021-24565 | HIGH | 8.8 | 0.7% | Aug 23, 2021 | The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings,... |
| CVE-2021-24564 | MEDIUM | 5.4 | 0.6% | Aug 23, 2021 | The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outp... |
| CVE-2021-24562 | HIGH | 7.5 | 1.6% | Aug 23, 2021 | The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 ... |
| CVE-2021-24561 | MEDIUM | 5.4 | 0.7% | Aug 23, 2021 | The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in t... |
| CVE-2021-24558 | MEDIUM | 5.4 | 0.7% | Aug 23, 2021 | The pspin_duplicate_post_save_as_new_post function of the Project Status WordPress plugin through 1.6 does not sanitise,... |
| CVE-2021-24557 | HIGH | 7.2 | 1.5% | Aug 23, 2021 | The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped b... |
| CVE-2021-24556 | MEDIUM | 6.1 | 1.3% | Aug 23, 2021 | The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sani... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now