2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3617 | HIGH | 7.2 | 1.7% | Aug 17, 2021 | A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a spec... |
| CVE-2021-3616 | CRITICAL | 9.8 | 0.9% | Aug 17, 2021 | A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device... |
| CVE-2021-3615 | MEDIUM | 6.8 | 0.3% | Aug 17, 2021 | A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow code execution if a specific file e... |
| CVE-2021-3459 | MEDIUM | 6.8 | 0.3% | Aug 17, 2021 | A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privi... |
| CVE-2021-3458 | MEDIUM | 4.6 | 0.2% | Aug 17, 2021 | The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settin... |
| CVE-2021-32829 | CRITICAL | 9.9 | 2.9% | Aug 17, 2021 | ZStack is open source IaaS(infrastructure as a service) software aiming to automate datacenters, managing resources of c... |
| CVE-2021-25957 | HIGH | 8.8 | 1.1% | Aug 17, 2021 | In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low ... |
| CVE-2021-25956 | HIGH | 7.2 | 0.9% | Aug 17, 2021 | In “Dolibarr” application, v3.3.beta1_20121221 to v13.0.2 have “Modify” access for admin level users to change other use... |
| CVE-2021-34407 | — | — | — | Aug 17, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-30480. Reason: This candidate is a reservation d... |
| CVE-2021-37711 | HIGH | 8.8 | 1.1% | Aug 16, 2021 | Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Ver... |
| CVE-2021-37710 | MEDIUM | 5.4 | 0.7% | Aug 16, 2021 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a Cross-Site Scripting vulnerability vi... |
| CVE-2021-37709 | MEDIUM | 6.5 | 0.8% | Aug 16, 2021 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure d... |
| CVE-2021-36282 | LOW | 3.3 | 0.2% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can poten... |
| CVE-2021-36281 | HIGH | 8.8 | 0.7% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment vulnerability. A low privile... |
| CVE-2021-36280 | MEDIUM | 5.5 | 0.2% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulner... |
| CVE-2021-36279 | HIGH | 7.8 | 0.2% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulner... |
| CVE-2021-36278 | MEDIUM | 5.5 | 0.6% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in... |
| CVE-2021-21599 | MEDIUM | 6.7 | 0.4% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. This may allow a user ... |
| CVE-2021-21595 | MEDIUM | 6.7 | 0.2% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS ... |
| CVE-2021-21594 | MEDIUM | 5.3 | 0.8% | Aug 16, 2021 | Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerab... |
| CVE-2021-21592 | MEDIUM | 6.5 | 0.8% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged use... |
| CVE-2021-21568 | MEDIUM | 4.3 | 0.6% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability. An authenticated user wi... |
| CVE-2021-32827 | CRITICAL | 9.6 | 2.2% | Aug 16, 2021 | MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An att... |
| CVE-2021-32826 | HIGH | 8.1 | 1.1% | Aug 16, 2021 | Proxyee-Down is open source proxy software. An attacker being able to provide an extension script (eg: through a MiTM at... |
| CVE-2021-38608 | HIGH | 7.8 | 0.3% | Aug 16, 2021 | Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now