2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24456 | HIGH | 7.2 | 1.3% | Aug 2, 2021 | The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters bef... |
| CVE-2021-24455 | MEDIUM | 5.4 | 0.7% | Aug 2, 2021 | The Tutor LMS – eLearning and online course solution WordPress plugin before 1.9.2 did not escape the Summary field of A... |
| CVE-2021-24450 | MEDIUM | 4.8 | 0.7% | Aug 2, 2021 | The User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin befor... |
| CVE-2021-24448 | MEDIUM | 4.8 | 0.6% | Aug 2, 2021 | The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Mo... |
| CVE-2021-24444 | MEDIUM | 4.8 | 2.3% | Aug 2, 2021 | The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Tax... |
| CVE-2021-24443 | MEDIUM | 5.4 | 0.6% | Aug 2, 2021 | The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network & Membership WordPress plugin be... |
| CVE-2021-24430 | HIGH | 7.2 | 1.7% | Aug 2, 2021 | The Speed Booster Pack ⚡ PageSpeed Optimization Suite WordPress plugin before 4.2.0 did not validate its caching_exclude... |
| CVE-2021-24428 | MEDIUM | 4.8 | 0.5% | Aug 2, 2021 | The RSS for Yandex Turbo WordPress plugin through 1.30 does not sanitise or escape some of its settings before saving an... |
| CVE-2021-24425 | MEDIUM | 4.8 | 0.6% | Aug 2, 2021 | The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin be... |
| CVE-2021-24371 | LOW | 2.7 | 1.0% | Aug 2, 2021 | The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) tak... |
| CVE-2021-3351 | MEDIUM | 5.4 | 0.5% | Aug 2, 2021 | OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page. |
| CVE-2021-34556 | MEDIUM | 5.5 | 0.4% | Aug 2, 2021 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via ... |
| CVE-2021-35477 | MEDIUM | 5.5 | 0.5% | Aug 2, 2021 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via ... |
| CVE-2021-32066 | HIGH | 7.4 | 2.9% | Aug 1, 2021 | An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an e... |
| CVE-2021-37760 | CRITICAL | 9.8 | 1.3% | Jul 31, 2021 | A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level ... |
| CVE-2021-37759 | CRITICAL | 9.8 | 1.3% | Jul 31, 2021 | A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access l... |
| CVE-2021-33617 | MEDIUM | 5.3 | 2.1% | Jul 31, 2021 | Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&use... |
| CVE-2021-32807 | HIGH | 7.2 | 2.0% | Jul 30, 2021 | The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. R... |
| CVE-2021-27495 | HIGH | 7.1 | 0.8% | Jul 30, 2021 | Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All ... |
| CVE-2021-27491 | HIGH | 7.5 | 1.1% | Jul 30, 2021 | Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All ... |
| CVE-2021-34630 | MEDIUM | 6.1 | 1.6% | Jul 30, 2021 | In the Pro and Enterprise versions of GTranslate < 2.8.65, the gtranslate_request_uri_var function runs at the top of al... |
| CVE-2021-34629 | MEDIUM | 4.3 | 0.7% | Jul 30, 2021 | The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/... |
| CVE-2021-22521 | MEDIUM | 6.7 | 0.2% | Jul 30, 2021 | A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting ve... |
| CVE-2021-3636 | MEDIUM | 4.6 | 0.3% | Jul 30, 2021 | It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly... |
| CVE-2021-35193 | HIGH | 7.5 | 1.2% | Jul 30, 2021 | Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across di... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now