2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-47734 | HIGH | 8.6 | 0.7% | Dec 23, 2025 | CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP... |
| CVE-2021-47721 | HIGH | 8.8 | 0.4% | Dec 23, 2025 | Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other proje... |
| CVE-2021-47720 | HIGH | 8.7 | 0.3% | Dec 23, 2025 | Orangescrum 1.8.0 contains an authenticated SQL injection vulnerability that allows authorized users to manipulate datab... |
| CVE-2021-47713 | HIGH | 8.7 | 0.4% | Dec 22, 2025 | Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafti... |
| CVE-2021-47712 | HIGH | 7.5 | 0.2% | Dec 18, 2025 | A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through exi... |
| CVE-2021-47711 | HIGH | 8.8 | 0.3% | Dec 18, 2025 | A SQL injection vulnerability in Kentico Xperience allows authenticated editors to inject malicious SQL queries via onli... |
| CVE-2021-47730 | HIGH | 8.8 | 0.2% | Dec 9, 2025 | Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create admin... |
| CVE-2021-47723 | HIGH | 8.8 | 0.2% | Dec 9, 2025 | STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with ... |
| CVE-2021-47719 | HIGH | 8.7 | 0.4% | Dec 9, 2025 | COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbit... |
| CVE-2021-47718 | HIGH | 7.5 | 0.5% | Dec 9, 2025 | OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive ... |
| CVE-2021-47710 | HIGH | 8.7 | 0.3% | Dec 9, 2025 | COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentia... |
| CVE-2021-47709 | HIGH | 8.7 | 0.3% | Dec 9, 2025 | COMMAX Smart Home System allows an unauthenticated attacker to change configuration and cause denial-of-service through ... |
| CVE-2021-47706 | HIGH | 8.7 | 0.4% | Dec 9, 2025 | COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated... |
| CVE-2021-47705 | HIGH | 8.7 | 0.4% | Dec 9, 2025 | COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to e... |
| CVE-2021-47703 | HIGH | 7.2 | 0.3% | Dec 9, 2025 | OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate servi... |
| CVE-2021-47701 | HIGH | 8.8 | 0.4% | Dec 9, 2025 | OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and... |
| CVE-2021-4471 | HIGH | 8.7 | 0.6% | Nov 14, 2025 | TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files... |
| CVE-2021-4469 | HIGH | 8.7 | 0.6% | Nov 14, 2025 | Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoin... |
| CVE-2021-4468 | HIGH | 8.7 | 0.6% | Nov 14, 2025 | PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authenticatio... |
| CVE-2021-4467 | HIGH | 8.7 | 0.4% | Nov 14, 2025 | Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communicati... |
| CVE-2021-4466 | HIGH | 8.7 | 0.5% | Nov 14, 2025 | IPCop versions up to and including 2.1.9 contain an authenticated remote code execution vulnerability within the web-bas... |
| CVE-2021-4465 | HIGH | 8.7 | 0.4% | Nov 14, 2025 | ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.... |
| CVE-2021-4463 | HIGH | 8.7 | 1.3% | Nov 12, 2025 | Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulne... |
| CVE-2021-47700 | HIGH | 7.8 | 0.3% | Oct 30, 2025 | Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/per... |
| CVE-2021-47693 | HIGH | 8.8 | 1.0% | Oct 30, 2025 | The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulner... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now