2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23849 | HIGH | 8.8 | 0.5% | Aug 5, 2021 | A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected s... |
| CVE-2021-22241 | MEDIUM | 5.4 | 1.0% | Aug 5, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0. It was possible to exploit a sto... |
| CVE-2021-22240 | MEDIUM | 4.3 | 0.7% | Aug 5, 2021 | Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on... |
| CVE-2021-21863 | HIGH | 7.8 | 1.2% | Aug 5, 2021 | A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH COD... |
| CVE-2021-21739 | MEDIUM | 4.6 | 0.2% | Aug 5, 2021 | A ZTE's product of the transport network access layer has a security vulnerability. Because the system does not sufficie... |
| CVE-2021-21738 | MEDIUM | 6.1 | 0.6% | Aug 5, 2021 | ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient inp... |
| CVE-2021-37625 | HIGH | 7.5 | 0.9% | Aug 5, 2021 | Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept f... |
| CVE-2021-38138 | MEDIUM | 5.4 | 1.5% | Aug 5, 2021 | OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not a... |
| CVE-2021-37605 | HIGH | 7.5 | 1.3% | Aug 5, 2021 | In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only... |
| CVE-2021-37604 | HIGH | 7.5 | 1.2% | Aug 5, 2021 | In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of... |
| CVE-2021-38095 | HIGH | 7.5 | 2.0% | Aug 5, 2021 | The REST API in Planview Spigit 4.5.3 allows remote unauthenticated attackers to query sensitive user accounts data, as ... |
| CVE-2021-32603 | MEDIUM | 6.5 | 0.7% | Aug 5, 2021 | A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and belo... |
| CVE-2021-32598 | MEDIUM | 4.3 | 0.8% | Aug 5, 2021 | An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager a... |
| CVE-2021-3539 | MEDIUM | 5.4 | 0.5% | Aug 4, 2021 | EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-... |
| CVE-2021-36805 | MEDIUM | 4.8 | 0.6% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the... |
| CVE-2021-36804 | HIGH | 8.1 | 1.0% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy... |
| CVE-2021-36803 | MEDIUM | 5.4 | 0.6% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in pro... |
| CVE-2021-36802 | MEDIUM | 6.5 | 0.9% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'lo... |
| CVE-2021-36801 | HIGH | 8.1 | 1.1% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, compani... |
| CVE-2021-36800 | CRITICAL | 9.1 | 1.5% | Aug 4, 2021 | Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. ... |
| CVE-2021-31869 | HIGH | 7.5 | 1.1% | Aug 4, 2021 | Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the ... |
| CVE-2021-31867 | HIGH | 7.5 | 1.2% | Aug 4, 2021 | Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the ... |
| CVE-2021-38115 | MEDIUM | 6.5 | 1.9% | Aug 4, 2021 | read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a deni... |
| CVE-2021-38114 | MEDIUM | 5.5 | 1.0% | Aug 4, 2021 | libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-201... |
| CVE-2021-38113 | MEDIUM | 5.4 | 0.5% | Aug 4, 2021 | In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bo... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now