2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20422 | HIGH | 7.5 | 1.3% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored... |
| CVE-2021-20369 | MEDIUM | 5.9 | 0.7% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to de... |
| CVE-2021-20368 | MEDIUM | 5.4 | 0.5% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2021-20366 | MEDIUM | 5.4 | 0.5% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2021-20365 | MEDIUM | 5.4 | 0.5% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2021-20364 | MEDIUM | 5.4 | 0.5% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2021-20363 | MEDIUM | 5.4 | 0.5% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2021-20362 | MEDIUM | 5.4 | 0.5% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2021-20361 | MEDIUM | 5.4 | 0.5% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2021-20360 | HIGH | 7.5 | 0.7% | Jul 13, 2021 | IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to de... |
| CVE-2021-36124 | CRITICAL | 9.8 | 1.1% | Jul 13, 2021 | An issue was discovered in Echo ShareCare 8.15.5. It does not perform authentication or authorization checks when access... |
| CVE-2021-36123 | MEDIUM | 6.5 | 0.8% | Jul 13, 2021 | An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is suscept... |
| CVE-2021-36122 | HIGH | 8.8 | 1.0% | Jul 13, 2021 | An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParse_Sup/UnzipFile_Upd.cfm is... |
| CVE-2021-36121 | HIGH | 8.8 | 2.1% | Jul 13, 2021 | An issue was discovered in Echo ShareCare 8.15.5. The file-upload feature in Access/DownloadFeed_Mnt/FileUpload_Upd.cfm ... |
| CVE-2021-35957 | MEDIUM | 6.7 | 0.3% | Jul 13, 2021 | Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local admin... |
| CVE-2021-33578 | CRITICAL | 9.8 | 1.2% | Jul 13, 2021 | Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authenticat... |
| CVE-2021-31224 | LOW | 3.5 | 0.3% | Jul 13, 2021 | SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-onl... |
| CVE-2021-31223 | MEDIUM | 5.7 | 0.6% | Jul 13, 2021 | SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the ... |
| CVE-2021-31222 | MEDIUM | 5.7 | 0.5% | Jul 13, 2021 | SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the... |
| CVE-2021-31221 | MEDIUM | 5.7 | 0.5% | Jul 13, 2021 | SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the... |
| CVE-2021-31220 | MEDIUM | 5.2 | 0.3% | Jul 13, 2021 | SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to ... |
| CVE-2021-20593 | HIGH | 7.1 | 0.9% | Jul 13, 2021 | Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controll... |
| CVE-2021-36376 | HIGH | 7.8 | 0.4% | Jul 13, 2021 | dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory... |
| CVE-2021-31810 | MEDIUM | 5.8 | 3.0% | Jul 13, 2021 | An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can us... |
| CVE-2021-31225 | HIGH | 7.3 | 0.3% | Jul 13, 2021 | SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging acce... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now