2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29298 | MEDIUM | 5.3 | 0.8% | Jul 30, 2021 | Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of ... |
| CVE-2021-29297 | MEDIUM | 5.3 | 0.8% | Jul 30, 2021 | Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service an... |
| CVE-2021-37746 | MEDIUM | 6.1 | 1.3% | Jul 30, 2021 | textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have suffici... |
| CVE-2021-37743 | MEDIUM | 5.4 | 0.7% | Jul 30, 2021 | app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON fo... |
| CVE-2021-37742 | MEDIUM | 5.4 | 0.6% | Jul 30, 2021 | app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster re... |
| CVE-2021-37606 | MEDIUM | 5.3 | 0.7% | Jul 30, 2021 | Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision ... |
| CVE-2021-37601 | HIGH | 7.5 | 2.3% | Jul 30, 2021 | muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, me... |
| CVE-2021-37600 | MEDIUM | 5.5 | 0.7% | Jul 30, 2021 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use... |
| CVE-2021-37596 | MEDIUM | 6.1 | 0.6% | Jul 30, 2021 | Telegram Web K Alpha 0.6.1 allows XSS via a document name. |
| CVE-2021-37595 | CRITICAL | 9.8 | 1.5% | Jul 30, 2021 | In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing i... |
| CVE-2021-37594 | CRITICAL | 9.8 | 1.4% | Jul 30, 2021 | In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing i... |
| CVE-2021-37593 | CRITICAL | 9.1 | 5.2% | Jul 30, 2021 | PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQ... |
| CVE-2021-37588 | MEDIUM | 5.9 | 0.9% | Jul 30, 2021 | In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data. |
| CVE-2021-37587 | MEDIUM | 6.5 | 0.8% | Jul 30, 2021 | In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data. |
| CVE-2021-37144 | CRITICAL | 9.1 | 1.3% | Jul 30, 2021 | CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user... |
| CVE-2021-36983 | HIGH | 7.8 | 0.5% | Jul 30, 2021 | replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/... |
| CVE-2021-36766 | HIGH | 7.2 | 3.7% | Jul 30, 2021 | Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/d... |
| CVE-2021-36754 | HIGH | 7.5 | 64.9% | Jul 30, 2021 | PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE ... |
| CVE-2021-36624 | CRITICAL | 9.8 | 3.4% | Jul 30, 2021 | Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that al... |
| CVE-2021-36621 | HIGH | 8.1 | 2.1% | Jul 30, 2021 | Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is v... |
| CVE-2021-36605 | MEDIUM | 5.4 | 0.6% | Jul 30, 2021 | engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user lis... |
| CVE-2021-36386 | HIGH | 7.5 | 2.6% | Jul 30, 2021 | report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, w... |
| CVE-2021-36004 | HIGH | 8.8 | 2.2% | Jul 30, 2021 | Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. A... |
| CVE-2021-35479 | MEDIUM | 5.4 | 13.2% | Jul 30, 2021 | Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log functio... |
| CVE-2021-35478 | MEDIUM | 5.4 | 76.6% | Jul 30, 2021 | Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now