2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25093 | HIGH | 7.5 | 1.2% | Feb 1, 2022 | The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauth... |
| CVE-2021-24919 | HIGH | 8.8 | 1.5% | Feb 1, 2022 | The Wicked Folders WordPress plugin before 2.8.10 does not sanitise and escape the folder_id parameter before using it i... |
| CVE-2021-24763 | HIGH | 8.8 | 0.6% | Feb 1, 2022 | The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_s... |
| CVE-2021-43859 | HIGH | 7.5 | 8.2% | Feb 1, 2022 | XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a ... |
| CVE-2021-41040 | HIGH | 7.5 | 1.4% | Feb 1, 2022 | In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-... |
| CVE-2021-46669 | HIGH | 7.5 | 2.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is us... |
| CVE-2021-46459 | HIGH | 7.5 | 1.4% | Jan 31, 2022 | Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source... |
| CVE-2021-42635 | HIGH | 8.1 | 5.7% | Jan 31, 2022 | PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code e... |
| CVE-2021-42631 | HIGH | 8.1 | 6.3% | Jan 31, 2022 | PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code... |
| CVE-2021-46458 | HIGH | 7.5 | 1.4% | Jan 31, 2022 | Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post... |
| CVE-2021-28962 | HIGH | 7.2 | 1.2% | Jan 31, 2022 | Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands. |
| CVE-2021-46101 | HIGH | 7.5 | 1.4% | Jan 31, 2022 | In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly. |
| CVE-2021-44255 | HIGH | 7.2 | 3.0% | Jan 31, 2022 | Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to uplo... |
| CVE-2021-23521 | HIGH | 7.8 | 0.5% | Jan 31, 2022 | This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is c... |
| CVE-2021-34805 | HIGH | 7.5 | 26.8% | Jan 31, 2022 | An issue was discovered in FAUST iServer before 9.0.019.019.7. For each URL request, it accesses the corresponding .fau ... |
| CVE-2021-27971 | HIGH | 7.8 | 0.4% | Jan 31, 2022 | Alps Alpine Touchpad Driver 10.3201.101.215 is vulnerable to DLL Injection. |
| CVE-2021-44419 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44418 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44417 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44416 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44415 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44414 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44413 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44412 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
| CVE-2021-44411 | HIGH | 7.7 | 1.2% | Jan 28, 2022 | A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now