2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37549 | CRITICAL | 9.1 | 1.3% | Aug 6, 2021 | In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. |
| CVE-2021-37548 | HIGH | 7.5 | 0.6% | Aug 6, 2021 | In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. |
| CVE-2021-37547 | MEDIUM | 5.3 | 0.7% | Aug 6, 2021 | In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made. |
| CVE-2021-37546 | MEDIUM | 5.3 | 0.5% | Aug 6, 2021 | In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used. |
| CVE-2021-37545 | HIGH | 7.5 | 0.9% | Aug 6, 2021 | In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. |
| CVE-2021-37544 | CRITICAL | 9.8 | 1.2% | Aug 6, 2021 | In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization. |
| CVE-2021-37543 | HIGH | 8.8 | 1.4% | Aug 6, 2021 | In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects. |
| CVE-2021-37542 | MEDIUM | 6.1 | 0.6% | Aug 6, 2021 | In JetBrains TeamCity before 2020.2.3, XSS was possible. |
| CVE-2021-37541 | MEDIUM | 6.1 | 0.5% | Aug 6, 2021 | In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible. |
| CVE-2021-37540 | MEDIUM | 6.5 | 0.7% | Aug 6, 2021 | In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used. |
| CVE-2021-36708 | HIGH | 7.5 | 1.2% | Aug 6, 2021 | In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the... |
| CVE-2021-36707 | CRITICAL | 9.8 | 2.6% | Aug 6, 2021 | In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter... |
| CVE-2021-36706 | CRITICAL | 9.8 | 2.6% | Aug 6, 2021 | In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible with a page parameter ... |
| CVE-2021-36705 | CRITICAL | 9.8 | 2.6% | Aug 6, 2021 | In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible with a page parameter va... |
| CVE-2021-36351 | CRITICAL | 9.8 | 1.9% | Aug 6, 2021 | SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth... |
| CVE-2021-36209 | CRITICAL | 9.8 | 1.0% | Aug 6, 2021 | In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset. |
| CVE-2021-37381 | HIGH | 8.8 | 0.6% | Aug 6, 2021 | Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private information such as photos t... |
| CVE-2021-22295 | MEDIUM | 5.5 | 0.1% | Aug 6, 2021 | A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to ca... |
| CVE-2021-38152 | MEDIUM | 5.4 | 1.0% | Aug 6, 2021 | index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS. |
| CVE-2021-38151 | MEDIUM | 5.4 | 0.6% | Aug 6, 2021 | index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS. |
| CVE-2021-38149 | MEDIUM | 5.4 | 0.7% | Aug 6, 2021 | index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS. |
| CVE-2021-37388 | CRITICAL | 9.8 | 3.7% | Aug 6, 2021 | A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an att... |
| CVE-2021-32597 | MEDIUM | 5.4 | 0.6% | Aug 6, 2021 | Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions... |
| CVE-2021-32587 | MEDIUM | 4.3 | 0.6% | Aug 6, 2021 | An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 a... |
| CVE-2021-3655 | LOW | 3.3 | 0.3% | Aug 5, 2021 | A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP p... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now