2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45787 | MEDIUM | 5.4 | 0.5% | Mar 16, 2022 | There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted... |
| CVE-2021-42552 | MEDIUM | 6.1 | 0.7% | Mar 16, 2022 | Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, execut... |
| CVE-2021-46705 | MEDIUM | 4.4 | 0.2% | Mar 16, 2022 | A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory a... |
| CVE-2021-45852 | MEDIUM | 5.3 | 0.7% | Mar 16, 2022 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patie... |
| CVE-2021-43956 | MEDIUM | 6.1 | 0.7% | Mar 16, 2022 | The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitr... |
| CVE-2021-43955 | MEDIUM | 4.3 | 0.8% | Mar 16, 2022 | The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote att... |
| CVE-2021-29134 | MEDIUM | 5.3 | 1.3% | Mar 15, 2022 | The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL. |
| CVE-2021-42391 | MEDIUM | 6.5 | 1.4% | Mar 14, 2022 | Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compresse... |
| CVE-2021-42390 | MEDIUM | 6.5 | 1.2% | Mar 14, 2022 | Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compr... |
| CVE-2021-42389 | MEDIUM | 6.5 | 1.2% | Mar 14, 2022 | Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed ... |
| CVE-2021-39055 | MEDIUM | 5.4 | 0.5% | Mar 14, 2022 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2021-39051 | MEDIUM | 6.5 | 0.8% | Mar 14, 2022 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by impro... |
| CVE-2021-38971 | MEDIUM | 4.9 | 0.9% | Mar 14, 2022 | IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to byp... |
| CVE-2021-44964 | MEDIUM | 6.3 | 1.0% | Mar 14, 2022 | Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sa... |
| CVE-2021-41952 | MEDIUM | 4.8 | 0.5% | Mar 14, 2022 | Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicio... |
| CVE-2021-25026 | MEDIUM | 5.5 | 0.7% | Mar 14, 2022 | The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could... |
| CVE-2021-25006 | MEDIUM | 6.1 | 0.8% | Mar 14, 2022 | The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin da... |
| CVE-2021-24996 | MEDIUM | 6.1 | 0.8% | Mar 14, 2022 | The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpay_error parameter befor... |
| CVE-2021-24995 | MEDIUM | 4.8 | 0.6% | Mar 14, 2022 | The HTML5 Responsive FAQ WordPress plugin through 2.8.5 does not properly sanitise and escape some of its settings, whic... |
| CVE-2021-24982 | MEDIUM | 6.4 | 0.6% | Mar 14, 2022 | The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting... |
| CVE-2021-24966 | MEDIUM | 4.9 | 5.2% | Mar 14, 2022 | The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high p... |
| CVE-2021-24958 | MEDIUM | 5.4 | 0.6% | Mar 14, 2022 | The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_... |
| CVE-2021-24950 | MEDIUM | 5.4 | 0.5% | Mar 14, 2022 | The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_... |
| CVE-2021-24940 | MEDIUM | 6.1 | 1.5% | Mar 14, 2022 | The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an a... |
| CVE-2021-24897 | MEDIUM | 5.4 | 0.6% | Mar 14, 2022 | The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with cla... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now