2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38165 | MEDIUM | 5.3 | 4.5% | Aug 7, 2021 | Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext cr... |
| CVE-2021-38159 | CRITICAL | 9.8 | 1.9% | Aug 7, 2021 | In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web appl... |
| CVE-2021-29923 | HIGH | 7.5 | 3.7% | Aug 7, 2021 | Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in ... |
| CVE-2021-29922 | CRITICAL | 9.1 | 2.6% | Aug 7, 2021 | library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginni... |
| CVE-2021-38160 | HIGH | 7.8 | 0.4% | Aug 7, 2021 | In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untru... |
| CVE-2021-38148 | CRITICAL | 9.8 | 1.2% | Aug 7, 2021 | Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs. |
| CVE-2021-38157 | MEDIUM | 6.1 | 1.1% | Aug 6, 2021 | LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. N... |
| CVE-2021-38155 | HIGH | 7.5 | 2.5% | Aug 6, 2021 | OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allow... |
| CVE-2021-35312 | HIGH | 7.8 | 1.1% | Aug 6, 2021 | A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Serv... |
| CVE-2021-36795 | HIGH | 7.8 | 0.2% | Aug 6, 2021 | A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.... |
| CVE-2021-20598 | MEDIUM | 5.3 | 1.5% | Aug 6, 2021 | Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16... |
| CVE-2021-20597 | CRITICAL | 9.1 | 2.2% | Aug 6, 2021 | Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/3... |
| CVE-2021-20594 | HIGH | 7.5 | 2.4% | Aug 6, 2021 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safet... |
| CVE-2021-36455 | HIGH | 8.8 | 1.1% | Aug 6, 2021 | SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comment... |
| CVE-2021-36454 | MEDIUM | 5.4 | 0.6% | Aug 6, 2021 | Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\b... |
| CVE-2021-38137 | HIGH | 8.1 | 0.7% | Aug 6, 2021 | Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, a... |
| CVE-2021-38136 | MEDIUM | 6.5 | 1.2% | Aug 6, 2021 | Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter... |
| CVE-2021-26999 | MEDIUM | 4.3 | 0.6% | Aug 6, 2021 | NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The lo... |
| CVE-2021-26998 | MEDIUM | 4.3 | 0.6% | Aug 6, 2021 | NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users. Cu... |
| CVE-2021-26606 | CRITICAL | 9.8 | 2.4% | Aug 6, 2021 | A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability i... |
| CVE-2021-37554 | MEDIUM | 4.3 | 0.9% | Aug 6, 2021 | In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions. |
| CVE-2021-37553 | HIGH | 7.5 | 1.5% | Aug 6, 2021 | In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. |
| CVE-2021-37552 | MEDIUM | 5.4 | 0.6% | Aug 6, 2021 | In JetBrains YouTrack before 2021.2.17925, stored XSS was possible. |
| CVE-2021-37551 | MEDIUM | 5.3 | 0.7% | Aug 6, 2021 | In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. |
| CVE-2021-37550 | HIGH | 7.5 | 1.1% | Aug 6, 2021 | In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now