2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38903 | MEDIUM | 5.4 | 0.9% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of ... |
| CVE-2021-29824 | MEDIUM | 4.3 | 0.8% | Apr 22, 2022 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could ha... |
| CVE-2021-20464 | MEDIUM | 6.5 | 1.3% | Apr 22, 2022 | IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb atta... |
| CVE-2021-32927 | MEDIUM | 6.1 | 0.6% | Apr 22, 2022 | An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS T... |
| CVE-2021-43708 | MEDIUM | 5.5 | 0.3% | Apr 21, 2022 | The Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the generation of a classification l... |
| CVE-2021-35229 | MEDIUM | 6.1 | 3.0% | Apr 21, 2022 | Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when usi... |
| CVE-2021-23055 | MEDIUM | 6.5 | 0.7% | Apr 21, 2022 | On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ing... |
| CVE-2021-41162 | MEDIUM | 6.1 | 0.6% | Apr 21, 2022 | Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to beta6 the `ajax.render.php?opera... |
| CVE-2021-41161 | MEDIUM | 6.1 | 0.6% | Apr 21, 2022 | Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don't prope... |
| CVE-2021-43990 | MEDIUM | 5.3 | 0.6% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload... |
| CVE-2021-43988 | MEDIUM | 5.9 | 0.8% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of fi... |
| CVE-2021-43933 | MEDIUM | 5.9 | 0.6% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receivin... |
| CVE-2021-38483 | MEDIUM | 5.7 | 0.2% | Apr 20, 2022 | The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileg... |
| CVE-2021-23283 | MEDIUM | 5.4 | 0.5% | Apr 19, 2022 | Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerab... |
| CVE-2021-39078 | MEDIUM | 4.4 | 0.1% | Apr 19, 2022 | IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM... |
| CVE-2021-39072 | MEDIUM | 5.9 | 1.2% | Apr 19, 2022 | IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to prope... |
| CVE-2021-39033 | MEDIUM | 6.5 | 1.0% | Apr 19, 2022 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote at... |
| CVE-2021-43129 | MEDIUM | 6.5 | 1.7% | Apr 19, 2022 | A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a ... |
| CVE-2021-41570 | MEDIUM | 5.4 | 0.4% | Apr 19, 2022 | Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User ... |
| CVE-2021-25120 | MEDIUM | 6.1 | 2.9% | Apr 18, 2022 | The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX ... |
| CVE-2021-42782 | MEDIUM | 5.3 | 2.6% | Apr 18, 2022 | Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash p... |
| CVE-2021-42781 | MEDIUM | 5.3 | 2.7% | Apr 18, 2022 | Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash... |
| CVE-2021-42780 | MEDIUM | 5.3 | 2.0% | Apr 18, 2022 | A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash p... |
| CVE-2021-42779 | MEDIUM | 5.3 | 1.9% | Apr 18, 2022 | A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. |
| CVE-2021-42778 | MEDIUM | 5.3 | 2.0% | Apr 18, 2022 | A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now