2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32787 | MEDIUM | 4.3 | 0.6% | Aug 2, 2021 | Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leak... |
| CVE-2021-34637 | HIGH | 8.8 | 0.7% | Aug 2, 2021 | The Post Index WordPress plugin is vulnerable to Cross-Site Request Forgery via the OptionsPage function found in the ~/... |
| CVE-2021-34635 | MEDIUM | 6.1 | 0.9% | Aug 2, 2021 | The Poll Maker WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the mcount parameter found in the ~/... |
| CVE-2021-34632 | HIGH | 8.8 | 0.7% | Aug 2, 2021 | The SEO Backlinks WordPress plugin is vulnerable to Cross-Site Request Forgery via the loc_config function found in the ... |
| CVE-2021-34628 | HIGH | 8.8 | 0.7% | Aug 2, 2021 | The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found ... |
| CVE-2021-32019 | MEDIUM | 6.1 | 0.6% | Aug 2, 2021 | There is missing input validation of host names displayed in OpenWrt before 19.07.8. The Connection Status page of the l... |
| CVE-2021-29979 | MEDIUM | 6.1 | 0.7% | Aug 2, 2021 | Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in ... |
| CVE-2021-27943 | HIGH | 7.5 | 0.9% | Aug 2, 2021 | The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vu... |
| CVE-2021-27503 | MEDIUM | 4.8 | 0.6% | Aug 2, 2021 | Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: ... |
| CVE-2021-27499 | MEDIUM | 5.9 | 0.5% | Aug 2, 2021 | Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: ... |
| CVE-2021-21866 | HIGH | 7.8 | 1.7% | Aug 2, 2021 | A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality o... |
| CVE-2021-21865 | HIGH | 7.8 | 1.3% | Aug 2, 2021 | A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of ... |
| CVE-2021-21864 | HIGH | 7.8 | 1.7% | Aug 2, 2021 | A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionalit... |
| CVE-2021-37848 | HIGH | 7.5 | 1.5% | Aug 2, 2021 | common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash ... |
| CVE-2021-37847 | HIGH | 7.5 | 1.5% | Aug 2, 2021 | crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest v... |
| CVE-2021-35450 | HIGH | 7.2 | 2.4% | Aug 2, 2021 | A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute ... |
| CVE-2021-3673 | HIGH | 7.5 | 1.8% | Aug 2, 2021 | A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can le... |
| CVE-2021-37843 | CRITICAL | 9.8 | 1.5% | Aug 2, 2021 | The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the use... |
| CVE-2021-33198 | HIGH | 7.5 | 3.4% | Aug 2, 2021 | In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString o... |
| CVE-2021-33197 | MEDIUM | 5.3 | 2.3% | Aug 2, 2021 | In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a ... |
| CVE-2021-33196 | HIGH | 7.5 | 3.5% | Aug 2, 2021 | In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a ... |
| CVE-2021-33195 | HIGH | 7.3 | 3.2% | Aug 2, 2021 | Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, ... |
| CVE-2021-32810 | CRITICAL | 9.8 | 1.9% | Aug 2, 2021 | crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions ... |
| CVE-2021-32806 | MEDIUM | 6.1 | 1.0% | Aug 2, 2021 | Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1... |
| CVE-2021-22447 | HIGH | 7.5 | 0.7% | Aug 2, 2021 | There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitat... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now