2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32825 | CRITICAL | 9.1 | 0.9% | Aug 16, 2021 | bblfshd is an open source self-hosted server for source code parsing. In bblfshd before commit 4265465b9b6fb5663c30ee438... |
| CVE-2021-32822 | MEDIUM | 5.3 | 1.2% | Aug 16, 2021 | The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable... |
| CVE-2021-22940 | HIGH | 7.5 | 14.0% | Aug 16, 2021 | Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to ... |
| CVE-2021-22939 | MEDIUM | 5.3 | 14.7% | Aug 16, 2021 | If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no e... |
| CVE-2021-22938 | HIGH | 7.2 | 2.1% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command inje... |
| CVE-2021-22937 | HIGH | 7.2 | 7.8% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write... |
| CVE-2021-22936 | MEDIUM | 6.1 | 0.8% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack a... |
| CVE-2021-22935 | HIGH | 7.2 | 2.1% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command inje... |
| CVE-2021-22934 | HIGH | 7.2 | 4.7% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Co... |
| CVE-2021-22933 | MEDIUM | 6.5 | 1.4% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary... |
| CVE-2021-22932 | HIGH | 7.5 | 0.4% | Aug 16, 2021 | An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes... |
| CVE-2021-22931 | CRITICAL | 9.8 | 22.0% | Aug 16, 2021 | Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to miss... |
| CVE-2021-0114 | MEDIUM | 6.7 | 0.3% | Aug 16, 2021 | Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an... |
| CVE-2021-38758 | HIGH | 7.5 | 2.3% | Aug 16, 2021 | Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.ph... |
| CVE-2021-38757 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php. |
| CVE-2021-38756 | MEDIUM | 6.1 | 0.7% | Aug 16, 2021 | Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php. |
| CVE-2021-38755 | MEDIUM | 5.3 | 1.0% | Aug 16, 2021 | Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php. |
| CVE-2021-38754 | CRITICAL | 9.8 | 1.8% | Aug 16, 2021 | SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php. |
| CVE-2021-38753 | CRITICAL | 9.8 | 1.5% | Aug 16, 2021 | An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain ... |
| CVE-2021-38752 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | A cross-site scripting (XSS) vulnerability in Online Catering Reservation System using PHP on Sourcecodester allows an a... |
| CVE-2021-38751 | MEDIUM | 4.3 | 2.5% | Aug 16, 2021 | A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A modified HTTP header can cha... |
| CVE-2021-38607 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input. |
| CVE-2021-35395 | CRITICAL | 9.8 | 98.1% | Aug 16, 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be u... |
| CVE-2021-35394 | CRITICAL | 9.8 | 99.9% | Aug 16, 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as... |
| CVE-2021-35393 | CRITICAL | 9.8 | 70.3% | Aug 16, 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now