2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24865 | HIGH | 7.2 | 1.5% | Jan 24, 2022 | The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters ... |
| CVE-2021-24858 | HIGH | 7.2 | 1.3% | Jan 24, 2022 | The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before... |
| CVE-2021-24696 | HIGH | 8.8 | 0.6% | Jan 24, 2022 | The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to ... |
| CVE-2021-39293 | HIGH | 7.5 | 6.9% | Jan 24, 2022 | In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many fil... |
| CVE-2021-39480 | HIGH | 7.5 | 1.1% | Jan 21, 2022 | Bingrep v0.8.5 was discovered to contain a memory allocation failure which can cause a Denial of Service (DoS). |
| CVE-2021-46242 | HIGH | 8.8 | 1.2% | Jan 21, 2022 | HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry. |
| CVE-2021-36339 | HIGH | 7.8 | 0.2% | Jan 21, 2022 | The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentiall... |
| CVE-2021-36338 | HIGH | 8 | 0.4% | Jan 21, 2022 | Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious us... |
| CVE-2021-23664 | HIGH | 7.5 | 1.4% | Jan 21, 2022 | The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing ... |
| CVE-2021-23631 | HIGH | 7.5 | 2.0% | Jan 21, 2022 | This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of packa... |
| CVE-2021-23460 | HIGH | 7.5 | 2.3% | Jan 21, 2022 | The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of... |
| CVE-2021-44593 | HIGH | 8.1 | 4.2% | Jan 21, 2022 | Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL inje... |
| CVE-2021-44464 | HIGH | 8.8 | 0.6% | Jan 21, 2022 | Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across al... |
| CVE-2021-41835 | HIGH | 7.5 | 0.3% | Jan 21, 2022 | Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be... |
| CVE-2021-33846 | HIGH | 7.2 | 0.3% | Jan 21, 2022 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticat... |
| CVE-2021-23236 | HIGH | 7.5 | 1.1% | Jan 21, 2022 | Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ versio... |
| CVE-2021-46334 | HIGH | 7.8 | 0.8% | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat. |
| CVE-2021-46332 | HIGH | 7.8 | 1.0% | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter. |
| CVE-2021-46328 | HIGH | 7.8 | 0.8% | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main. |
| CVE-2021-46326 | HIGH | 7.8 | 0.9% | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy. |
| CVE-2021-46325 | HIGH | 7.8 | 0.7% | Jan 20, 2022 | Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf. |
| CVE-2021-46324 | HIGH | 7.8 | 0.7% | Jan 20, 2022 | Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. |
| CVE-2021-45417 | HIGH | 7.8 | 0.5% | Jan 20, 2022 | AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attribut... |
| CVE-2021-44737 | HIGH | 8.8 | 1.4% | Jan 20, 2022 | PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal ... |
| CVE-2021-43269 | HIGH | 8.8 | 1.3% | Jan 20, 2022 | In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a maliciou... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now