2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-48012 | HIGH | 8.2 | 0.4% | Oct 12, 2026 | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by... |
| CVE-2021-48011 | HIGH | 7.5 | 0.6% | Oct 12, 2026 | Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escap... |
| CVE-2021-48009 | — | — | — | Oct 12, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2021-48008 | HIGH | 7.5 | 0.3% | Sep 18, 2026 | Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQ... |
| CVE-2021-3030 | MEDIUM | 6.1 | 0.3% | Sep 17, 2026 | Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme G... |
| CVE-2021-48007 | MEDIUM | 6.5 | 0.3% | Sep 6, 2026 | PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields... |
| CVE-2021-48006 | LOW | 3.3 | 0.1% | Sep 6, 2026 | PocketMine-MP before 4.0.3 does not perform case-insensitive matching when removing operator entries from ops.txt. The r... |
| CVE-2021-44320 | HIGH | 7.5 | 0.4% | Sep 4, 2026 | Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An atta... |
| CVE-2021-44319 | HIGH | 7.5 | 0.5% | Sep 4, 2026 | Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-F... |
| CVE-2021-43614 | MEDIUM | 6.7 | 0.1% | Sep 3, 2026 | Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and ... |
| CVE-2021-43613 | MEDIUM | 6.5 | 0.1% | Sep 3, 2026 | An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in run... |
| CVE-2021-38489 | HIGH | 8.2 | 0.2% | Sep 3, 2026 | HDD password plaintext is stored in a UEFI variable. |
| CVE-2021-48005 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-48004 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-48003 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-48002 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-48001 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-48000 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-47999 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-47998 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-47997 | — | — | — | Aug 27, 2026 | Rejected reason: This CVE ID has been rejected. |
| CVE-2021-47996 | — | — | 0.5% | Aug 25, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
| CVE-2021-4482 | — | — | — | Aug 21, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2021-4476 | — | — | — | Aug 21, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2021-4475 | — | — | — | Aug 21, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now