2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36542 | MEDIUM | 4.3 | 0.5% | Aug 3, 2021 | Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x<5.1.23 and v6.0.x <6.0.... |
| CVE-2021-35343 | MEDIUM | 4.3 | 0.5% | Aug 3, 2021 | Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x<5.1.23 and v6.0.x<6.0.16 allows... |
| CVE-2021-33330 | MEDIUM | 4.3 | 1.1% | Aug 3, 2021 | Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharin... |
| CVE-2021-33328 | MEDIUM | 5.4 | 0.7% | Aug 3, 2021 | Cross-site scripting (XSS) vulnerability in the Asset module's edit vocabulary page in Liferay Portal 7.0.0 through 7.3.... |
| CVE-2021-33327 | MEDIUM | 4.3 | 0.9% | Aug 3, 2021 | The Portlet Configuration module in Liferay Portal 7.2.0 through 7.3.3, and Liferay DXP 7.0 fix pack pack 93 and 94, 7.1... |
| CVE-2021-33326 | MEDIUM | 6.1 | 1.0% | Aug 3, 2021 | Cross-site scripting (XSS) vulnerability in the Frontend JS module in Liferay Portal 7.3.4 and earlier, and Liferay DXP ... |
| CVE-2021-33325 | MEDIUM | 4.9 | 0.6% | Aug 3, 2021 | The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix p... |
| CVE-2021-33324 | MEDIUM | 4.3 | 0.9% | Aug 3, 2021 | The Layout module in Liferay Portal 7.1.0 through 7.3.1, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack... |
| CVE-2021-33323 | HIGH | 7.5 | 1.0% | Aug 3, 2021 | The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 b... |
| CVE-2021-33322 | HIGH | 7.5 | 1.2% | Aug 3, 2021 | In Liferay Portal 7.3.0 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 18, and 7.2 before fix ... |
| CVE-2021-33321 | HIGH | 7.5 | 1.4% | Aug 3, 2021 | Insecure default configuration in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attacker... |
| CVE-2021-33320 | MEDIUM | 4.3 | 1.2% | Aug 3, 2021 | The Flags module in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, an... |
| CVE-2021-32804 | HIGH | 8.1 | 15.0% | Aug 3, 2021 | The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overw... |
| CVE-2021-32803 | HIGH | 8.1 | 7.8% | Aug 3, 2021 | The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Over... |
| CVE-2021-30564 | HIGH | 8.8 | 1.4% | Aug 3, 2021 | Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit h... |
| CVE-2021-30563 | HIGH | 8.8 | 8.9% | Aug 3, 2021 | Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2021-30562 | HIGH | 8.8 | 1.3% | Aug 3, 2021 | Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit hea... |
| CVE-2021-30561 | HIGH | 8.8 | 4.7% | Aug 3, 2021 | Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2021-30560 | HIGH | 8.8 | 21.6% | Aug 3, 2021 | Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit he... |
| CVE-2021-30559 | HIGH | 8.8 | 1.3% | Aug 3, 2021 | Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit he... |
| CVE-2021-30541 | HIGH | 8.8 | 1.7% | Aug 3, 2021 | Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2021-36654 | MEDIUM | 5.4 | 1.9% | Aug 3, 2021 | CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while... |
| CVE-2021-36623 | CRITICAL | 9.8 | 1.8% | Aug 3, 2021 | Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE. |
| CVE-2021-36622 | CRITICAL | 9.8 | 1.9% | Aug 3, 2021 | Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin ... |
| CVE-2021-32018 | MEDIUM | 6.5 | 1.2% | Aug 3, 2021 | An issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to arbitrary file reading due to... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now