2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37215 | MEDIUM | 4.3 | 0.7% | Aug 9, 2021 | The employee management page of Flygo contains an Insecure Direct Object Reference (IDOR) vulnerability. After being aut... |
| CVE-2021-37214 | HIGH | 8.8 | 1.1% | Aug 9, 2021 | The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authen... |
| CVE-2021-37213 | MEDIUM | 4.3 | 0.8% | Aug 9, 2021 | The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authentica... |
| CVE-2021-37212 | MEDIUM | 5.4 | 0.6% | Aug 9, 2021 | The bulletin function of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated... |
| CVE-2021-37211 | MEDIUM | 5.4 | 0.5% | Aug 9, 2021 | The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers c... |
| CVE-2021-24522 | MEDIUM | 6.1 | 1.3% | Aug 9, 2021 | The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before... |
| CVE-2021-24521 | HIGH | 7.2 | 1.6% | Aug 9, 2021 | The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from... |
| CVE-2021-24520 | HIGH | 8.8 | 1.6% | Aug 9, 2021 | The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, ... |
| CVE-2021-24509 | MEDIUM | 5.4 | 0.6% | Aug 9, 2021 | The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing ... |
| CVE-2021-24507 | CRITICAL | 9.8 | 11.3% | Aug 9, 2021 | The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from t... |
| CVE-2021-24505 | MEDIUM | 5.4 | 0.6% | Aug 9, 2021 | The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issue... |
| CVE-2021-24502 | MEDIUM | 4.8 | 0.7% | Aug 9, 2021 | The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the p... |
| CVE-2021-24501 | HIGH | 8.1 | 1.3% | Aug 9, 2021 | The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user wa... |
| CVE-2021-24500 | HIGH | 8.1 | 0.6% | Aug 9, 2021 | Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing... |
| CVE-2021-24499 | CRITICAL | 9.8 | 60.4% | Aug 9, 2021 | The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader... |
| CVE-2021-24495 | MEDIUM | 6.1 | 2.9% | Aug 9, 2021 | The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter befo... |
| CVE-2021-24467 | MEDIUM | 6.5 | 0.6% | Aug 9, 2021 | The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows atta... |
| CVE-2021-24304 | MEDIUM | 6.1 | 1.2% | Aug 9, 2021 | The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, lea... |
| CVE-2021-38209 | LOW | 3.3 | 0.3% | Aug 8, 2021 | net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net names... |
| CVE-2021-38208 | MEDIUM | 5.5 | 0.5% | Aug 8, 2021 | net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NUL... |
| CVE-2021-38207 | HIGH | 7.5 | 3.4% | Aug 8, 2021 | drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial... |
| CVE-2021-38206 | MEDIUM | 5.5 | 0.3% | Aug 8, 2021 | The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers... |
| CVE-2021-38205 | LOW | 3.3 | 0.3% | Aug 8, 2021 | drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat ... |
| CVE-2021-38204 | MEDIUM | 6.8 | 0.3% | Aug 8, 2021 | drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial... |
| CVE-2021-38203 | MEDIUM | 5.5 | 0.4% | Aug 8, 2021 | btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trig... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now