2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21578 | MEDIUM | 6.1 | 0.9% | Aug 3, 2021 | Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker m... |
| CVE-2021-21577 | MEDIUM | 6.1 | 0.9% | Aug 3, 2021 | Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker c... |
| CVE-2021-21576 | MEDIUM | 6.1 | 0.9% | Aug 3, 2021 | Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker c... |
| CVE-2021-36157 | MEDIUM | 5.3 | 1.4% | Aug 3, 2021 | An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths ... |
| CVE-2021-36156 | MEDIUM | 5.3 | 1.5% | Aug 3, 2021 | An issue was discovered in Grafana Loki through 2.2.1. The header value X-Scope-OrgID is used to construct file paths fo... |
| CVE-2021-32772 | HIGH | 8.8 | 2.4% | Aug 3, 2021 | Poddycast is a podcast app made with Electron. Prior to version 0.8.1, an attacker can create a podcast or episode with ... |
| CVE-2021-31630 | HIGH | 8.8 | 27.1% | Aug 3, 2021 | Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Cod... |
| CVE-2021-27954 | HIGH | 8.2 | 0.9% | Aug 3, 2021 | A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function ... |
| CVE-2021-27953 | HIGH | 7.5 | 1.7% | Aug 3, 2021 | A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Con... |
| CVE-2021-27952 | CRITICAL | 9.8 | 1.1% | Aug 3, 2021 | Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a threat actor to gain acces... |
| CVE-2021-36379 | — | — | — | Aug 3, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-36159 | CRITICAL | 9.1 | 2.6% | Aug 3, 2021 | libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and H... |
| CVE-2021-22400 | MEDIUM | 5.5 | 0.4% | Aug 3, 2021 | Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An a... |
| CVE-2021-37833 | MEDIUM | 6.1 | 4.9% | Aug 3, 2021 | A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid applic... |
| CVE-2021-37832 | CRITICAL | 9.8 | 4.1% | Aug 3, 2021 | A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application databa... |
| CVE-2021-35265 | MEDIUM | 6.1 | 3.4% | Aug 3, 2021 | A reflected cross-site scripting (XSS) vulnerability in MaxSite CMS before V106 via product/page/* allows remote attacke... |
| CVE-2021-37916 | MEDIUM | 6.1 | 0.7% | Aug 3, 2021 | Joplin before 2.0.9 allows XSS via button and form in the note body. |
| CVE-2021-37914 | MEDIUM | 6.5 | 1.0% | Aug 3, 2021 | In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input par... |
| CVE-2021-26085 | MEDIUM | 5.3 | 99.9% | Aug 3, 2021 | Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriza... |
| CVE-2021-21565 | MEDIUM | 5.3 | 0.9% | Aug 3, 2021 | Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error ... |
| CVE-2021-21563 | MEDIUM | 6.5 | 0.8% | Aug 3, 2021 | Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its ... |
| CVE-2021-21562 | MEDIUM | 4.4 | 0.2% | Aug 3, 2021 | Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PR... |
| CVE-2021-21553 | HIGH | 8.8 | 0.2% | Aug 3, 2021 | Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific condit... |
| CVE-2021-32812 | MEDIUM | 6.1 | 0.8% | Aug 2, 2021 | Monkshu is an enterprise application server for mobile apps (iOS and Android), responsive HTML 5 apps, and JSON API serv... |
| CVE-2021-32811 | HIGH | 7.2 | 2.3% | Aug 2, 2021 | Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code executio... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now