2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42245 | MEDIUM | 6.1 | 0.7% | Jun 6, 2022 | FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sectio... |
| CVE-2021-43271 | MEDIUM | 6.8 | 0.8% | Jun 3, 2022 | Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11.1, 11.11.1a, 11.11.5, a... |
| CVE-2021-42892 | MEDIUM | 4.3 | 0.7% | Jun 3, 2022 | In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and p... |
| CVE-2021-38221 | MEDIUM | 5.4 | 0.5% | Jun 2, 2022 | bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS. |
| CVE-2021-43512 | MEDIUM | 5.5 | 0.2% | Jun 2, 2022 | An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cau... |
| CVE-2021-42202 | MEDIUM | 5.5 | 0.7% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter... |
| CVE-2021-42200 | MEDIUM | 5.5 | 0.7% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located i... |
| CVE-2021-42198 | MEDIUM | 5.5 | 0.7% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() lo... |
| CVE-2021-42196 | MEDIUM | 5.5 | 0.7% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() l... |
| CVE-2021-36890 | MEDIUM | 4.3 | 0.4% | Jun 2, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress. |
| CVE-2021-36866 | MEDIUM | 4.8 | 0.5% | Jun 2, 2022 | Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables... |
| CVE-2021-33504 | MEDIUM | 4.9 | 0.7% | Jun 2, 2022 | Couchbase Server before 7.1.0 has Incorrect Access Control. |
| CVE-2021-27914 | MEDIUM | 4.8 | 0.4% | Jun 1, 2022 | A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject exe... |
| CVE-2021-27778 | MEDIUM | 4.8 | 0.4% | Jun 1, 2022 | HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Appro... |
| CVE-2021-27781 | MEDIUM | 4.8 | 0.4% | May 27, 2022 | The Master operator may be able to embed script tag in HTML with alert pop-up display cookie. |
| CVE-2021-27780 | MEDIUM | 5.3 | 0.7% | May 27, 2022 | The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment. |
| CVE-2021-28509 | MEDIUM | 6.1 | 0.4% | May 26, 2022 | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent Te... |
| CVE-2021-28508 | MEDIUM | 6.1 | 0.5% | May 26, 2022 | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent Te... |
| CVE-2021-4232 | MEDIUM | 6.1 | 0.5% | May 26, 2022 | A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function o... |
| CVE-2021-4231 | MEDIUM | 5.4 | 1.1% | May 26, 2022 | A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the ... |
| CVE-2021-42692 | MEDIUM | 6.5 | 0.8% | May 26, 2022 | There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS. |
| CVE-2021-27783 | MEDIUM | 6.5 | 0.3% | May 25, 2022 | User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed. |
| CVE-2021-35487 | MEDIUM | 6.5 | 1.0% | May 25, 2022 | Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection atta... |
| CVE-2021-32989 | MEDIUM | 6.1 | 2.2% | May 25, 2022 | When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns erro... |
| CVE-2021-44974 | MEDIUM | 5.5 | 0.8% | May 25, 2022 | radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol par... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now