2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24937 | MEDIUM | 6.1 | 0.8% | Feb 1, 2022 | The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area pa... |
| CVE-2021-24934 | MEDIUM | 6.1 | 1.4% | Feb 1, 2022 | The Visual CSS Style Editor WordPress plugin before 7.5.4 does not sanitise and escape the wyp_page_type parameter befor... |
| CVE-2021-24926 | MEDIUM | 6.1 | 12.9% | Feb 1, 2022 | The Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the domain parameter before outputting it b... |
| CVE-2021-24900 | MEDIUM | 4.8 | 0.7% | Feb 1, 2022 | The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow ... |
| CVE-2021-24868 | MEDIUM | 4.3 | 0.9% | Feb 1, 2022 | The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated... |
| CVE-2021-24775 | MEDIUM | 5.3 | 1.3% | Feb 1, 2022 | The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to... |
| CVE-2021-24765 | MEDIUM | 6.1 | 1.4% | Feb 1, 2022 | The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before o... |
| CVE-2021-24764 | MEDIUM | 6.1 | 0.8% | Feb 1, 2022 | The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[sessio... |
| CVE-2021-24761 | MEDIUM | 6.5 | 0.6% | Feb 1, 2022 | The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not ha... |
| CVE-2021-24707 | MEDIUM | 4.8 | 0.6% | Feb 1, 2022 | The Learning Courses WordPress plugin before 5.0 does not sanitise and escape the Email PDT identity token settings, whi... |
| CVE-2021-24686 | MEDIUM | 4.8 | 0.7% | Feb 1, 2022 | The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in... |
| CVE-2021-24648 | MEDIUM | 6.1 | 0.9% | Feb 1, 2022 | The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before ... |
| CVE-2021-46668 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact ... |
| CVE-2021-46667 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash. |
| CVE-2021-46666 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE c... |
| CVE-2021-46665 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations. |
| CVE-2021-46664 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr. |
| CVE-2021-46663 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements. |
| CVE-2021-46662 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with... |
| CVE-2021-46661 | MEDIUM | 5.5 | 0.4% | Feb 1, 2022 | MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common t... |
| CVE-2021-44114 | MEDIUM | 4.8 | 1.0% | Jan 31, 2022 | Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows r... |
| CVE-2021-40042 | MEDIUM | 6.5 | 0.6% | Jan 31, 2022 | There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process an... |
| CVE-2021-40033 | MEDIUM | 5.5 | 0.2% | Jan 31, 2022 | There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software... |
| CVE-2021-46659 | MEDIUM | 5.5 | 0.6% | Jan 29, 2022 | MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to ... |
| CVE-2021-46658 | MEDIUM | 5.5 | 0.4% | Jan 29, 2022 | save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_w... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now