2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37555 | CRITICAL | 9.8 | 1.4% | Jul 26, 2021 | TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-1673... |
| CVE-2021-32795 | MEDIUM | 5.9 | 1.7% | Jul 26, 2021 | ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. In ... |
| CVE-2021-32794 | HIGH | 7.5 | 1.0% | Jul 26, 2021 | ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due... |
| CVE-2021-37478 | CRITICAL | 9.8 | 2.2% | Jul 26, 2021 | In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, whic... |
| CVE-2021-37477 | CRITICAL | 9.8 | 2.2% | Jul 26, 2021 | In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `childre... |
| CVE-2021-37476 | CRITICAL | 9.8 | 2.2% | Jul 26, 2021 | In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` throu... |
| CVE-2021-37475 | CRITICAL | 9.8 | 2.5% | Jul 26, 2021 | In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `templat... |
| CVE-2021-37473 | CRITICAL | 9.8 | 2.2% | Jul 26, 2021 | In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-... |
| CVE-2021-37394 | HIGH | 8.8 | 1.2% | Jul 26, 2021 | In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user reg... |
| CVE-2021-37393 | MEDIUM | 5.4 | 0.5% | Jul 26, 2021 | In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can ... |
| CVE-2021-37392 | MEDIUM | 5.4 | 0.5% | Jul 26, 2021 | In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API ... |
| CVE-2021-36563 | MEDIUM | 5.4 | 1.7% | Jul 26, 2021 | The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the W... |
| CVE-2021-32792 | MEDIUM | 6.1 | 1.5% | Jul 26, 2021 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Co... |
| CVE-2021-32791 | MEDIUM | 5.9 | 1.5% | Jul 26, 2021 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Co... |
| CVE-2021-32790 | MEDIUM | 4.9 | 1.3% | Jul 26, 2021 | Woocommerce is an open source eCommerce plugin for WordPress. An SQL injection vulnerability impacts all WooCommerce sit... |
| CVE-2021-31292 | HIGH | 7.5 | 2.6% | Jul 26, 2021 | An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and... |
| CVE-2021-31291 | — | — | — | Jul 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of ... |
| CVE-2021-25804 | HIGH | 7.5 | 1.8% | Jul 26, 2021 | A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the a... |
| CVE-2021-25803 | HIGH | 7.1 | 0.7% | Jul 26, 2021 | A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows att... |
| CVE-2021-25802 | HIGH | 7.1 | 0.7% | Jul 26, 2021 | A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attacker... |
| CVE-2021-25801 | HIGH | 7.1 | 1.5% | Jul 26, 2021 | A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to ca... |
| CVE-2021-32789 | HIGH | 7.5 | 17.2% | Jul 26, 2021 | woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerabilit... |
| CVE-2021-32631 | MEDIUM | 6.5 | 1.1% | Jul 26, 2021 | Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d34... |
| CVE-2021-33629 | HIGH | 7.5 | 1.0% | Jul 26, 2021 | isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing exte... |
| CVE-2021-37534 | MEDIUM | 5.4 | 0.5% | Jul 26, 2021 | app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now