2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46086 | HIGH | 7.5 | 0.8% | Jan 25, 2022 | xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examina... |
| CVE-2021-43863 | HIGH | 7.5 | 1.9% | Jan 25, 2022 | The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Androi... |
| CVE-2021-34869 | HIGH | 8.8 | 0.4% | Jan 25, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-4... |
| CVE-2021-34868 | HIGH | 8.8 | 0.4% | Jan 25, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-4... |
| CVE-2021-34867 | HIGH | 8.2 | 0.4% | Jan 25, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-4... |
| CVE-2021-34866 | HIGH | 7.8 | 1.0% | Jan 25, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An ... |
| CVE-2021-34865 | HIGH | 8.8 | 3.1% | Jan 25, 2022 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETG... |
| CVE-2021-46113 | HIGH | 8.8 | 3.1% | Jan 25, 2022 | In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by ... |
| CVE-2021-45845 | HIGH | 7.8 | 1.9% | Jan 25, 2022 | The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to execute arbi... |
| CVE-2021-45844 | HIGH | 7.8 | 1.1% | Jan 25, 2022 | Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands... |
| CVE-2021-45803 | HIGH | 8.8 | 1.2% | Jan 25, 2022 | MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is ... |
| CVE-2021-45342 | HIGH | 7.8 | 1.9% | Jan 25, 2022 | A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker ... |
| CVE-2021-45341 | HIGH | 8.8 | 6.6% | Jan 25, 2022 | A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker ... |
| CVE-2021-46483 | HIGH | 7.8 | 0.8% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c. |
| CVE-2021-46482 | HIGH | 7.8 | 0.8% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c. |
| CVE-2021-44988 | HIGH | 7.8 | 1.1% | Jan 25, 2022 | Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecma_find_named_property in ecma-helpers.c. |
| CVE-2021-45222 | HIGH | 8.8 | 1.5% | Jan 24, 2022 | An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is... |
| CVE-2021-43588 | HIGH | 7.5 | 1.2% | Jan 24, 2022 | Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthentica... |
| CVE-2021-4088 | HIGH | 7.2 | 2.3% | Jan 24, 2022 | SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.1... |
| CVE-2021-44981 | HIGH | 8.8 | 3.7% | Jan 24, 2022 | In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and parses it int... |
| CVE-2021-25076 | HIGH | 8.8 | 19.0% | Jan 24, 2022 | The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in... |
| CVE-2021-25073 | HIGH | 8.8 | 0.7% | Jan 24, 2022 | The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, al... |
| CVE-2021-25045 | HIGH | 7.2 | 1.5% | Jan 24, 2022 | The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forum_id parameter before using it in ... |
| CVE-2021-24936 | HIGH | 8 | 0.5% | Jan 24, 2022 | The WP Extra File Types WordPress plugin before 0.5.1 does not have CSRF check when saving its settings, nor sanitise an... |
| CVE-2021-24906 | HIGH | 7.5 | 1.5% | Jan 24, 2022 | The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now