2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36910 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20. |
| CVE-2021-36896 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress p... |
| CVE-2021-36893 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Responsive Tabs (WordPress... |
| CVE-2021-36848 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versio... |
| CVE-2021-36846 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Premio Chaty (WordPress plu... |
| CVE-2021-22055 | MEDIUM | 5.3 | 0.9% | Apr 11, 2022 | The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attacke... |
| CVE-2021-39068 | MEDIUM | 5.4 | 0.5% | Apr 11, 2022 | IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows us... |
| CVE-2021-37293 | MEDIUM | 6.5 | 1.4% | Apr 11, 2022 | A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page... |
| CVE-2021-25090 | MEDIUM | 5.4 | 0.6% | Apr 11, 2022 | The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in vari... |
| CVE-2021-24987 | MEDIUM | 6.1 | 1.9% | Apr 11, 2022 | The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape t... |
| CVE-2021-24986 | MEDIUM | 6.1 | 0.8% | Apr 11, 2022 | The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attri... |
| CVE-2021-32161 | MEDIUM | 6.1 | 2.0% | Apr 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature. |
| CVE-2021-32160 | MEDIUM | 6.1 | 2.0% | Apr 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature. |
| CVE-2021-32158 | MEDIUM | 6.1 | 2.0% | Apr 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature. |
| CVE-2021-43009 | MEDIUM | 6.1 | 2.3% | Apr 8, 2022 | A Cross Site Scripting (XSS) vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the reque... |
| CVE-2021-36293 | MEDIUM | 6.7 | 0.2% | Apr 8, 2022 | Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin... |
| CVE-2021-36290 | MEDIUM | 6.7 | 0.2% | Apr 8, 2022 | Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin... |
| CVE-2021-46437 | MEDIUM | 4.8 | 0.5% | Apr 8, 2022 | An issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in ad_manage.php. |
| CVE-2021-43432 | MEDIUM | 6.1 | 0.8% | Apr 7, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in p... |
| CVE-2021-41026 | MEDIUM | 6.5 | 0.9% | Apr 6, 2022 | A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacke... |
| CVE-2021-32585 | MEDIUM | 6.1 | 0.7% | Apr 6, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow... |
| CVE-2021-43205 | MEDIUM | 5.3 | 0.9% | Apr 6, 2022 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7... |
| CVE-2021-32593 | MEDIUM | 6.5 | 0.5% | Apr 6, 2022 | A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN be... |
| CVE-2021-40375 | MEDIUM | 6.5 | 1.6% | Apr 6, 2022 | Apperta Foundation OpenEyes 3.5.1 allows remote attackers to view the sensitive information of patients without having t... |
| CVE-2021-40374 | MEDIUM | 5.4 | 1.2% | Apr 6, 2022 | A stored cross-site scripting (XSS) vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. Updating a patien... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now