2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32594 | HIGH | 8.1 | 0.7% | Aug 4, 2021 | An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, ... |
| CVE-2021-32590 | HIGH | 8.8 | 1.7% | Aug 4, 2021 | Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through... |
| CVE-2021-29765 | HIGH | 7.5 | 1.1% | Aug 4, 2021 | IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service acce... |
| CVE-2021-26098 | HIGH | 7.5 | 0.8% | Aug 4, 2021 | An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possess... |
| CVE-2021-3680 | MEDIUM | 4.9 | 0.5% | Aug 4, 2021 | showdoc is vulnerable to Missing Cryptographic Step |
| CVE-2021-33339 | MEDIUM | 4.8 | 0.7% | Aug 4, 2021 | Cross-site scripting (XSS) vulnerability in the Fragment module in Liferay Portal 7.2.1 through 7.3.4, and Liferay DXP 7... |
| CVE-2021-33336 | MEDIUM | 5.4 | 0.7% | Aug 4, 2021 | Cross-site scripting (XSS) vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3,... |
| CVE-2021-36483 | HIGH | 8.8 | 2.9% | Aug 4, 2021 | DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization. |
| CVE-2021-35397 | HIGH | 7.5 | 4.0% | Aug 4, 2021 | A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated... |
| CVE-2021-37232 | CRITICAL | 9.8 | 2.2% | Aug 4, 2021 | A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through APar_read64() in src/util.cpp due... |
| CVE-2021-37231 | MEDIUM | 5.5 | 1.0% | Aug 4, 2021 | A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsi... |
| CVE-2021-32813 | HIGH | 8.1 | 1.1% | Aug 3, 2021 | Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerabili... |
| CVE-2021-38084 | HIGH | 8.1 | 1.4% | Aug 3, 2021 | An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can p... |
| CVE-2021-34273 | HIGH | 7.5 | 1.1% | Aug 3, 2021 | A security flaw in the 'owned' function of a smart contract implementation for BTC2X (B2X), a tradeable Ethereum ERC20 t... |
| CVE-2021-34272 | HIGH | 7.5 | 1.1% | Aug 3, 2021 | A security flaw in the 'owned' function of a smart contract implementation for RobotCoin (RBTC), a tradeable Ethereum ER... |
| CVE-2021-34270 | HIGH | 7.5 | 1.1% | Aug 3, 2021 | An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 t... |
| CVE-2021-33403 | HIGH | 7.5 | 1.2% | Aug 3, 2021 | An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 toke... |
| CVE-2021-33335 | HIGH | 7.2 | 1.3% | Aug 3, 2021 | Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.... |
| CVE-2021-33334 | MEDIUM | 4.3 | 0.9% | Aug 3, 2021 | The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 befor... |
| CVE-2021-33333 | MEDIUM | 6.3 | 0.9% | Aug 3, 2021 | The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix p... |
| CVE-2021-33332 | MEDIUM | 6.1 | 0.8% | Aug 3, 2021 | Cross-site scripting (XSS) vulnerability in the Portlet Configuration module in Liferay Portal 7.1.0 through 7.3.2, and ... |
| CVE-2021-33331 | MEDIUM | 6.1 | 1.0% | Aug 3, 2021 | Open redirect vulnerability in the Notifications module in Liferay Portal 7.0.0 through 7.3.1, and Liferay DXP 7.0 befor... |
| CVE-2021-30589 | MEDIUM | 4.3 | 1.5% | Aug 3, 2021 | Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker ... |
| CVE-2021-30588 | HIGH | 8.8 | 2.0% | Aug 3, 2021 | Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2021-30587 | MEDIUM | 4.3 | 1.7% | Aug 3, 2021 | Inappropriate implementation in Compositing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potenti... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now