2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-31868 | MEDIUM | 5.4 | 0.5% | Aug 19, 2021 | Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket... |
| CVE-2021-31338 | HIGH | 7.8 | 0.2% | Aug 19, 2021 | A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1). Affected devices allow to... |
| CVE-2021-29280 | MEDIUM | 6.4 | 0.8% | Aug 19, 2021 | In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow |
| CVE-2021-24038 | HIGH | 7.8 | 0.2% | Aug 19, 2021 | Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle ... |
| CVE-2021-28002 | MEDIUM | 5.4 | 1.1% | Aug 19, 2021 | A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which a... |
| CVE-2021-28001 | MEDIUM | 5.4 | 1.0% | Aug 19, 2021 | A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remo... |
| CVE-2021-28000 | MEDIUM | 4.8 | 0.9% | Aug 19, 2021 | A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project... |
| CVE-2021-27999 | MEDIUM | 4.9 | 0.8% | Aug 19, 2021 | A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System P... |
| CVE-2021-27822 | MEDIUM | 4.8 | 0.6% | Aug 19, 2021 | A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parking Management System ... |
| CVE-2021-39274 | CRITICAL | 9.8 | 3.1% | Aug 19, 2021 | In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing a... |
| CVE-2021-39273 | HIGH | 8.8 | 2.7% | Aug 19, 2021 | In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an u... |
| CVE-2021-36762 | HIGH | 7.5 | 2.3% | Aug 19, 2021 | An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing... |
| CVE-2021-31401 | HIGH | 7.5 | 2.3% | Aug 19, 2021 | An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't... |
| CVE-2021-27565 | HIGH | 7.5 | 2.6% | Aug 19, 2021 | The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loo... |
| CVE-2021-31400 | HIGH | 7.5 | 1.5% | Aug 19, 2021 | An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-... |
| CVE-2021-31228 | HIGH | 7.5 | 1.3% | Aug 19, 2021 | An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query'... |
| CVE-2021-31227 | HIGH | 7.5 | 1.7% | Aug 19, 2021 | An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parse... |
| CVE-2021-31226 | CRITICAL | 9.8 | 3.2% | Aug 19, 2021 | An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parse... |
| CVE-2021-32602 | MEDIUM | 6.1 | 0.6% | Aug 19, 2021 | An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below... |
| CVE-2021-32588 | CRITICAL | 9.8 | 3.3% | Aug 18, 2021 | A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 ... |
| CVE-2021-34749 | HIGH | 8.6 | 1.7% | Aug 18, 2021 | A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firep... |
| CVE-2021-34745 | HIGH | 7.8 | 0.2% | Aug 18, 2021 | A vulnerability in the AppDynamics .NET Agent for Windows could allow an attacker to leverage an authenticated, local us... |
| CVE-2021-34734 | MEDIUM | 6.5 | 0.4% | Aug 18, 2021 | A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series ... |
| CVE-2021-34730 | CRITICAL | 9.8 | 13.6% | Aug 18, 2021 | A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W ... |
| CVE-2021-34716 | HIGH | 7.2 | 2.4% | Aug 18, 2021 | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communicat... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now