2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0093 | MEDIUM | 4.4 | 0.2% | Feb 9, 2022 | Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially en... |
| CVE-2021-0092 | MEDIUM | 4.4 | 0.2% | Feb 9, 2022 | Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a... |
| CVE-2021-0076 | MEDIUM | 5.5 | 0.3% | Feb 9, 2022 | Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi... |
| CVE-2021-0072 | MEDIUM | 5.5 | 0.3% | Feb 9, 2022 | Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Kil... |
| CVE-2021-0060 | MEDIUM | 6.6 | 0.3% | Feb 9, 2022 | Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_0... |
| CVE-2021-45286 | MEDIUM | 5.3 | 1.6% | Feb 9, 2022 | Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top... |
| CVE-2021-45106 | MEDIUM | 6.5 | 0.7% | Feb 9, 2022 | A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable acces... |
| CVE-2021-44912 | MEDIUM | 5.4 | 0.5% | Feb 9, 2022 | In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploa... |
| CVE-2021-44911 | MEDIUM | 5.4 | 0.6% | Feb 9, 2022 | XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading th... |
| CVE-2021-3813 | MEDIUM | 6.5 | 1.1% | Feb 9, 2022 | Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2. |
| CVE-2021-40837 | MEDIUM | 5.3 | 0.6% | Feb 9, 2022 | A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompr... |
| CVE-2021-45919 | MEDIUM | 5.4 | 0.6% | Feb 8, 2022 | Studio 42 elFinder through 2.1.31 allows XSS via an SVG document. |
| CVE-2021-45329 | MEDIUM | 6.1 | 0.8% | Feb 8, 2022 | Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wi... |
| CVE-2021-45328 | MEDIUM | 6.1 | 1.0% | Feb 8, 2022 | Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs. |
| CVE-2021-44957 | MEDIUM | 6.5 | 0.8% | Feb 8, 2022 | Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in th... |
| CVE-2021-44956 | MEDIUM | 6.5 | 0.8% | Feb 8, 2022 | Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issu... |
| CVE-2021-44864 | MEDIUM | 6.5 | 10.2% | Feb 8, 2022 | TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash rou... |
| CVE-2021-20877 | MEDIUM | 4.8 | 0.8% | Feb 8, 2022 | Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers (LBP162L/LBP162, MF... |
| CVE-2021-45281 | MEDIUM | 6.1 | 0.7% | Feb 7, 2022 | QuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php?usertoedit=XSS", as the us... |
| CVE-2021-3861 | MEDIUM | 6.8 | 0.5% | Feb 7, 2022 | The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer... |
| CVE-2021-25106 | MEDIUM | 5.4 | 0.6% | Feb 7, 2022 | The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1... |
| CVE-2021-25105 | MEDIUM | 4.8 | 0.6% | Feb 7, 2022 | The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privile... |
| CVE-2021-25103 | MEDIUM | 4.7 | 0.7% | Feb 7, 2022 | The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in... |
| CVE-2021-25096 | MEDIUM | 6.5 | 1.0% | Feb 7, 2022 | The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the... |
| CVE-2021-25084 | MEDIUM | 4.3 | 0.6% | Feb 7, 2022 | The Advanced Cron Manager WordPress plugin before 2.4.2 and Advanced Cron Manager Pro WordPress plugin before 2.5.3 do n... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now