2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42644 | MEDIUM | 6.5 | 0.9% | May 17, 2022 | cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file informa... |
| CVE-2021-42943 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrar... |
| CVE-2021-33021 | MEDIUM | 6.1 | 0.7% | May 16, 2022 | xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisa... |
| CVE-2021-33001 | MEDIUM | 6.1 | 0.7% | May 16, 2022 | xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisv... |
| CVE-2021-27442 | MEDIUM | 6.1 | 0.8% | May 16, 2022 | The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated... |
| CVE-2021-23266 | MEDIUM | 4.3 | 0.5% | May 16, 2022 | An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual mess... |
| CVE-2021-23265 | MEDIUM | 4.3 | 0.5% | May 16, 2022 | A logged-in and authenticated user with a Reviewer Role may lock a content item. |
| CVE-2021-46785 | MEDIUM | 5.3 | 0.5% | May 13, 2022 | The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique d... |
| CVE-2021-27773 | MEDIUM | 4.3 | 0.4% | May 12, 2022 | This vulnerability allows users to execute a clickjacking attack in the meeting's chat. |
| CVE-2021-27772 | MEDIUM | 6.5 | 0.6% | May 12, 2022 | Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users... |
| CVE-2021-27769 | MEDIUM | 5.3 | 0.7% | May 12, 2022 | Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system. ... |
| CVE-2021-27768 | MEDIUM | 5.9 | 0.3% | May 12, 2022 | Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensiti... |
| CVE-2021-26368 | MEDIUM | 4.4 | 0.1% | May 12, 2022 | Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser priv... |
| CVE-2021-26363 | MEDIUM | 4.4 | 0.2% | May 12, 2022 | A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to on... |
| CVE-2021-22531 | MEDIUM | 6.1 | 0.5% | May 12, 2022 | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scrip... |
| CVE-2021-26361 | MEDIUM | 5.5 | 0.2% | May 12, 2022 | A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate... |
| CVE-2021-26351 | MEDIUM | 5.5 | 0.2% | May 12, 2022 | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/wri... |
| CVE-2021-33149 | MEDIUM | 5.5 | 0.2% | May 12, 2022 | Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable informa... |
| CVE-2021-33135 | MEDIUM | 5.5 | 0.3% | May 12, 2022 | Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potent... |
| CVE-2021-33130 | MEDIUM | 4.6 | 0.2% | May 12, 2022 | Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an... |
| CVE-2021-33124 | MEDIUM | 6.7 | 0.2% | May 12, 2022 | Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to po... |
| CVE-2021-33117 | MEDIUM | 5.5 | 0.3% | May 12, 2022 | Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow ... |
| CVE-2021-33108 | MEDIUM | 6.7 | 0.2% | May 12, 2022 | Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged us... |
| CVE-2021-33103 | MEDIUM | 6.7 | 0.2% | May 12, 2022 | Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user t... |
| CVE-2021-33083 | MEDIUM | 4.4 | 0.2% | May 12, 2022 | Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now