2021 CVE Vulnerabilities
23,445 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35229 | MEDIUM | 6.1 | 3.0% | Apr 21, 2022 | Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when usi... |
| CVE-2021-23055 | MEDIUM | 6.5 | 0.7% | Apr 21, 2022 | On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ing... |
| CVE-2021-41162 | MEDIUM | 6.1 | 0.6% | Apr 21, 2022 | Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to beta6 the `ajax.render.php?opera... |
| CVE-2021-41161 | MEDIUM | 6.1 | 0.6% | Apr 21, 2022 | Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don't prope... |
| CVE-2021-43990 | MEDIUM | 5.3 | 0.6% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload... |
| CVE-2021-43988 | MEDIUM | 5.9 | 0.8% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of fi... |
| CVE-2021-43933 | MEDIUM | 5.9 | 0.6% | Apr 20, 2022 | The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receivin... |
| CVE-2021-38483 | MEDIUM | 5.7 | 0.2% | Apr 20, 2022 | The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileg... |
| CVE-2021-23283 | MEDIUM | 5.4 | 0.5% | Apr 19, 2022 | Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerab... |
| CVE-2021-39078 | MEDIUM | 4.4 | 0.1% | Apr 19, 2022 | IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM... |
| CVE-2021-39072 | MEDIUM | 5.9 | 1.2% | Apr 19, 2022 | IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to prope... |
| CVE-2021-39033 | MEDIUM | 6.5 | 1.0% | Apr 19, 2022 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote at... |
| CVE-2021-43129 | MEDIUM | 6.5 | 1.7% | Apr 19, 2022 | A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a ... |
| CVE-2021-41570 | MEDIUM | 5.4 | 0.4% | Apr 19, 2022 | Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User ... |
| CVE-2021-25120 | MEDIUM | 6.1 | 2.9% | Apr 18, 2022 | The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX ... |
| CVE-2021-42782 | MEDIUM | 5.3 | 2.6% | Apr 18, 2022 | Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash p... |
| CVE-2021-42781 | MEDIUM | 5.3 | 2.7% | Apr 18, 2022 | Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash... |
| CVE-2021-42780 | MEDIUM | 5.3 | 2.0% | Apr 18, 2022 | A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash p... |
| CVE-2021-42779 | MEDIUM | 5.3 | 1.9% | Apr 18, 2022 | A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. |
| CVE-2021-42778 | MEDIUM | 5.3 | 2.0% | Apr 18, 2022 | A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. |
| CVE-2021-3681 | MEDIUM | 5.5 | 0.2% | Apr 18, 2022 | A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directo... |
| CVE-2021-3652 | MEDIUM | 6.5 | 1.3% | Apr 18, 2022 | A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then... |
| CVE-2021-3503 | MEDIUM | 4.3 | 1.0% | Apr 18, 2022 | A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat fro... |
| CVE-2021-23285 | MEDIUM | 4.8 | 0.4% | Apr 18, 2022 | Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vuln... |
| CVE-2021-23284 | MEDIUM | 4.8 | 0.5% | Apr 18, 2022 | Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vuln... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now