2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35472 | HIGH | 8.8 | 1.7% | Jul 30, 2021 | An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spo... |
| CVE-2021-35458 | CRITICAL | 9.8 | 2.4% | Jul 30, 2021 | Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s paramete... |
| CVE-2021-34802 | HIGH | 8.8 | 1.0% | Jul 30, 2021 | A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow ... |
| CVE-2021-34166 | CRITICAL | 9.8 | 2.9% | Jul 30, 2021 | A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authenticatio... |
| CVE-2021-34165 | CRITICAL | 9.8 | 2.8% | Jul 30, 2021 | A SQL Injection vulnerability in Sourcecodester Basic Shopping Cart 1.0 allows a remote attacker to Bypass Authenticatio... |
| CVE-2021-32610 | HIGH | 7.1 | 73.4% | Jul 30, 2021 | In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability ... |
| CVE-2021-32558 | HIGH | 7.5 | 9.1% | Jul 30, 2021 | An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x befor... |
| CVE-2021-31878 | MEDIUM | 6.5 | 2.4% | Jul 30, 2021 | An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must ... |
| CVE-2021-31799 | HIGH | 7 | 1.5% | Jul 30, 2021 | In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code ... |
| CVE-2021-30483 | MEDIUM | 5.3 | 2.2% | Jul 30, 2021 | isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository. |
| CVE-2021-30124 | CRITICAL | 9.8 | 3.0% | Jul 30, 2021 | The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attacker... |
| CVE-2021-28966 | HIGH | 7.5 | 58.0% | Jul 30, 2021 | In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter w... |
| CVE-2021-28674 | MEDIUM | 5.4 | 0.9% | Jul 30, 2021 | The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node ... |
| CVE-2021-28095 | MEDIUM | 4.8 | 0.9% | Jul 30, 2021 | OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash coll... |
| CVE-2021-28094 | MEDIUM | 6.5 | 1.1% | Jul 30, 2021 | OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, ... |
| CVE-2021-28093 | MEDIUM | 6.5 | 1.1% | Jul 30, 2021 | OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due ... |
| CVE-2021-25200 | CRITICAL | 9.8 | 1.9% | Jul 30, 2021 | Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbit... |
| CVE-2021-20789 | MEDIUM | 6.1 | 0.9% | Jul 30, 2021 | Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, G... |
| CVE-2021-20788 | MEDIUM | 4.3 | 0.9% | Jul 30, 2021 | Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version... |
| CVE-2021-20787 | MEDIUM | 4.8 | 0.6% | Jul 30, 2021 | Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5... |
| CVE-2021-20786 | MEDIUM | 4.3 | 0.4% | Jul 30, 2021 | Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version ... |
| CVE-2021-20785 | MEDIUM | 4.8 | 0.6% | Jul 30, 2021 | Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5... |
| CVE-2021-20783 | HIGH | 8.8 | 0.6% | Jul 30, 2021 | Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the auth... |
| CVE-2021-20114 | HIGH | 7.5 | 6.0% | Jul 30, 2021 | When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the ... |
| CVE-2021-20113 | MEDIUM | 5.3 | 1.3% | Jul 30, 2021 | An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now