2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36788 | MEDIUM | 5.4 | 0.5% | Aug 13, 2021 | The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS. |
| CVE-2021-36787 | MEDIUM | 5.4 | 1.3% | Aug 13, 2021 | The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document. |
| CVE-2021-36786 | HIGH | 7.5 | 1.0% | Aug 13, 2021 | The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credent... |
| CVE-2021-36785 | MEDIUM | 5.4 | 0.5% | Aug 13, 2021 | The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS. |
| CVE-2021-34823 | CRITICAL | 9.1 | 2.0% | Aug 13, 2021 | The ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows remote file access via its built-in... |
| CVE-2021-3352 | CRITICAL | 9.1 | 1.0% | Aug 13, 2021 | The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0... |
| CVE-2021-38554 | MEDIUM | 5.3 | 0.9% | Aug 13, 2021 | HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a singl... |
| CVE-2021-38553 | MEDIUM | 4.4 | 0.3% | Aug 13, 2021 | HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Int... |
| CVE-2021-37703 | MEDIUM | 4.3 | 0.8% | Aug 13, 2021 | Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a use... |
| CVE-2021-37693 | HIGH | 7.5 | 0.8% | Aug 13, 2021 | Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when ... |
| CVE-2021-37586 | MEDIUM | 4.9 | 0.8% | Aug 13, 2021 | The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Admi... |
| CVE-2021-37028 | MEDIUM | 6.7 | 0.3% | Aug 13, 2021 | There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is ... |
| CVE-2021-36380 | CRITICAL | 9.8 | 97.6% | Aug 13, 2021 | Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dns... |
| CVE-2021-34398 | HIGH | 7.8 | 0.3% | Aug 13, 2021 | NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared l... |
| CVE-2021-32072 | MEDIUM | 6.5 | 0.8% | Aug 13, 2021 | The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code informatio... |
| CVE-2021-32071 | CRITICAL | 9.8 | 1.2% | Aug 13, 2021 | The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due t... |
| CVE-2021-32070 | MEDIUM | 5.4 | 0.6% | Aug 13, 2021 | The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking att... |
| CVE-2021-32069 | MEDIUM | 4.8 | 0.5% | Aug 13, 2021 | The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to impr... |
| CVE-2021-32068 | LOW | 3.7 | 0.6% | Aug 13, 2021 | The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-... |
| CVE-2021-32067 | MEDIUM | 6.5 | 0.7% | Aug 13, 2021 | The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system info... |
| CVE-2021-29880 | MEDIUM | 6.5 | 0.9% | Aug 13, 2021 | IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information discl... |
| CVE-2021-27402 | MEDIUM | 6.5 | 1.1% | Aug 13, 2021 | The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify... |
| CVE-2021-27401 | MEDIUM | 6.1 | 0.6% | Aug 13, 2021 | The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) us... |
| CVE-2021-1104 | CRITICAL | 9.8 | 1.7% | Aug 13, 2021 | The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) regis... |
| CVE-2021-38621 | CRITICAL | 9.1 | 1.0% | Aug 13, 2021 | The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-30... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now