2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28592 | HIGH | 7.8 | 1.9% | Aug 20, 2021 | Adobe Illustrator version 25.2.3 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specia... |
| CVE-2021-28591 | HIGH | 7.8 | 1.9% | Aug 20, 2021 | Adobe Illustrator version 25.2.3 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specia... |
| CVE-2021-28590 | HIGH | 7.8 | 2.0% | Aug 20, 2021 | Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a special... |
| CVE-2021-28589 | HIGH | 7.8 | 2.0% | Aug 20, 2021 | Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a special... |
| CVE-2021-36748 | HIGH | 7.5 | 14.8% | Aug 20, 2021 | A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestash... |
| CVE-2021-35529 | HIGH | 7.2 | 1.3% | Aug 20, 2021 | Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations an... |
| CVE-2021-22255 | MEDIUM | 6.5 | 1.3% | Aug 20, 2021 | SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server n... |
| CVE-2021-22254 | MEDIUM | 4.3 | 0.9% | Aug 20, 2021 | Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE ... |
| CVE-2021-22246 | MEDIUM | 6.5 | 1.3% | Aug 20, 2021 | A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abuse... |
| CVE-2021-22238 | MEDIUM | 5.4 | 71.8% | Aug 20, 2021 | An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS ... |
| CVE-2021-21823 | HIGH | 7.5 | 0.9% | Aug 20, 2021 | An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 1... |
| CVE-2021-34433 | HIGH | 7.5 | 0.3% | Aug 20, 2021 | In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handsh... |
| CVE-2021-34228 | MEDIUM | 6.1 | 29.2% | Aug 20, 2021 | Cross-site scripting in parent_control.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows... |
| CVE-2021-34223 | MEDIUM | 6.1 | 0.7% | Aug 20, 2021 | Cross-site scripting in urlfilter.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows atta... |
| CVE-2021-34220 | MEDIUM | 6.1 | 0.7% | Aug 20, 2021 | Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows at... |
| CVE-2021-34218 | MEDIUM | 5.3 | 0.8% | Aug 20, 2021 | Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /ad... |
| CVE-2021-34215 | MEDIUM | 6.1 | 0.7% | Aug 20, 2021 | Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attac... |
| CVE-2021-34207 | MEDIUM | 6.1 | 0.7% | Aug 20, 2021 | Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers... |
| CVE-2021-37598 | MEDIUM | 5.3 | 2.4% | Aug 19, 2021 | WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character. |
| CVE-2021-37597 | CRITICAL | 9.8 | 2.1% | Aug 19, 2021 | WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation. |
| CVE-2021-28490 | HIGH | 8.8 | 0.5% | Aug 19, 2021 | In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token. |
| CVE-2021-39302 | CRITICAL | 9.8 | 0.9% | Aug 19, 2021 | MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value. |
| CVE-2021-39138 | MEDIUM | 6.5 | 1.0% | Aug 19, 2021 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Developers can u... |
| CVE-2021-37698 | HIGH | 7.5 | 1.4% | Aug 19, 2021 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat... |
| CVE-2021-34645 | HIGH | 8.8 | 0.6% | Aug 19, 2021 | The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_s... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now