2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46657 | MEDIUM | 5.5 | 0.4% | Jan 29, 2022 | get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. |
| CVE-2021-4160 | MEDIUM | 5.9 | 3.8% | Jan 28, 2022 | There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including... |
| CVE-2021-46447 | MEDIUM | 5.4 | 0.5% | Jan 28, 2022 | A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary we... |
| CVE-2021-40415 | MEDIUM | 6.5 | 0.8% | Jan 28, 2022 | An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC... |
| CVE-2021-40404 | MEDIUM | 6.5 | 1.2% | Jan 28, 2022 | An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.136_20... |
| CVE-2021-40338 | MEDIUM | 5.3 | 0.7% | Jan 28, 2022 | Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and re... |
| CVE-2021-31567 | MEDIUM | 6.8 | 1.4% | Jan 28, 2022 | Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions <... |
| CVE-2021-26264 | MEDIUM | 5.5 | 0.2% | Jan 28, 2022 | A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and c... |
| CVE-2021-23863 | MEDIUM | 6.1 | 0.6% | Jan 28, 2022 | HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successf... |
| CVE-2021-23174 | MEDIUM | 4.8 | 83.2% | Jan 28, 2022 | Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plug... |
| CVE-2021-22822 | MEDIUM | 6.1 | 0.6% | Jan 28, 2022 | A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that ... |
| CVE-2021-22819 | MEDIUM | 4.3 | 0.7% | Jan 28, 2022 | A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modific... |
| CVE-2021-22815 | MEDIUM | 5.3 | 0.8% | Jan 28, 2022 | A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affec... |
| CVE-2021-22814 | MEDIUM | 6.1 | 0.7% | Jan 28, 2022 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists whic... |
| CVE-2021-22813 | MEDIUM | 6.1 | 0.7% | Jan 28, 2022 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that... |
| CVE-2021-22812 | MEDIUM | 6.1 | 0.7% | Jan 28, 2022 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that... |
| CVE-2021-22811 | MEDIUM | 6.1 | 0.7% | Jan 28, 2022 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that... |
| CVE-2021-22810 | MEDIUM | 6.1 | 0.7% | Jan 28, 2022 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that... |
| CVE-2021-22809 | MEDIUM | 5.5 | 0.6% | Jan 28, 2022 | A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 con... |
| CVE-2021-34073 | MEDIUM | 5.4 | 0.6% | Jan 28, 2022 | A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0... |
| CVE-2021-46556 | MEDIUM | 5.5 | 0.6% | Jan 27, 2022 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_bcode_insert_offset at src/mjs_bcode.c. This ... |
| CVE-2021-46554 | MEDIUM | 5.5 | 0.6% | Jan 27, 2022 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src/mjs_json.c. This vulner... |
| CVE-2021-46553 | MEDIUM | 5.5 | 0.6% | Jan 27, 2022 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c. This vulner... |
| CVE-2021-46550 | MEDIUM | 5.5 | 0.6% | Jan 27, 2022 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerabi... |
| CVE-2021-46549 | MEDIUM | 5.5 | 0.6% | Jan 27, 2022 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c. This vulnerabil... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now