2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46249 | MEDIUM | 6.5 | 0.6% | Feb 15, 2022 | An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856d... |
| CVE-2021-44960 | MEDIUM | 6.5 | 1.2% | Feb 15, 2022 | In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument o... |
| CVE-2021-46558 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Multiple cross-site scripting (XSS) vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to e... |
| CVE-2021-46557 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the input tabs. |
| CVE-2021-43948 | MEDIUM | 4.3 | 0.8% | Feb 15, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-43941 | MEDIUM | 6.5 | 0.6% | Feb 15, 2022 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including... |
| CVE-2021-43953 | MEDIUM | 4.3 | 0.5% | Feb 15, 2022 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread C... |
| CVE-2021-43950 | MEDIUM | 4.3 | 0.8% | Feb 15, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-43952 | MEDIUM | 4.3 | 0.4% | Feb 15, 2022 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default... |
| CVE-2021-45310 | MEDIUM | 5.3 | 0.9% | Feb 14, 2022 | Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to ... |
| CVE-2021-43106 | MEDIUM | 6.1 | 0.7% | Feb 14, 2022 | A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online (TWO) 5.3.3... |
| CVE-2021-45346 | MEDIUM | 4.3 | 1.6% | Feb 14, 2022 | A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made... |
| CVE-2021-39080 | MEDIUM | 6.5 | 0.7% | Feb 14, 2022 | Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1.14 , an attacker could... |
| CVE-2021-39079 | MEDIUM | 5.4 | 0.5% | Feb 14, 2022 | IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. This... |
| CVE-2021-44879 | MEDIUM | 5.5 | 1.2% | Feb 14, 2022 | In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a mov... |
| CVE-2021-25115 | MEDIUM | 6.4 | 0.7% | Feb 14, 2022 | The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS). Error log co... |
| CVE-2021-25110 | MEDIUM | 4.3 | 0.9% | Feb 14, 2022 | The Futurio Extra WordPress plugin before 1.6.3 allows any logged in user, such as subscriber, to extract any other user... |
| CVE-2021-25107 | MEDIUM | 6.1 | 1.5% | Feb 14, 2022 | The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back... |
| CVE-2021-25050 | MEDIUM | 4.8 | 0.6% | Feb 14, 2022 | The Remove Footer Credit WordPress plugin before 1.0.11 does properly sanitise its settings, allowing high privilege use... |
| CVE-2021-25033 | MEDIUM | 6.1 | 2.7% | Feb 14, 2022 | The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the ... |
| CVE-2021-25018 | MEDIUM | 5.4 | 0.5% | Feb 14, 2022 | The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_p... |
| CVE-2021-24904 | MEDIUM | 4.8 | 5.1% | Feb 14, 2022 | The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the... |
| CVE-2021-24874 | MEDIUM | 6.1 | 0.8% | Feb 14, 2022 | The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape t... |
| CVE-2021-24446 | MEDIUM | 5.4 | 0.3% | Feb 14, 2022 | The Remove Footer Credit WordPress plugin before 1.0.6 does not have CSRF check in place when saving its settings, which... |
| CVE-2021-4046 | MEDIUM | 5.4 | 0.4% | Feb 11, 2022 | The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vuln... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now