2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-48012 | HIGH | 8.2 | 0.4% | Oct 12, 2026 | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by... |
| CVE-2021-48011 | HIGH | 7.5 | 0.6% | Oct 12, 2026 | Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escap... |
| CVE-2021-48008 | HIGH | 7.5 | 0.3% | Sep 18, 2026 | Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQ... |
| CVE-2021-44320 | HIGH | 7.5 | 0.4% | Sep 4, 2026 | Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An atta... |
| CVE-2021-44319 | HIGH | 7.5 | 0.5% | Sep 4, 2026 | Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-F... |
| CVE-2021-38489 | HIGH | 8.2 | 0.2% | Sep 3, 2026 | HDD password plaintext is stored in a UEFI variable. |
| CVE-2021-32087 | HIGH | 8.8 | 0.3% | Jul 27, 2026 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent... |
| CVE-2021-32085 | HIGH | 8.8 | 0.3% | Jul 27, 2026 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent... |
| CVE-2021-27137 | HIGH | 8.1 | 5.4% | Jul 16, 2026 | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling function... |
| CVE-2021-47987 | HIGH | 7.7 | 0.1% | Jun 25, 2026 | Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the of... |
| CVE-2021-47986 | HIGH | 7.7 | 0.1% | Jun 25, 2026 | Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the reposit... |
| CVE-2021-47985 | HIGH | 8.5 | 0.1% | Jun 19, 2026 | Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local... |
| CVE-2021-4481 | HIGH | 8.3 | 0.1% | Jun 2, 2026 | Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure fil... |
| CVE-2021-4480 | HIGH | 8.3 | 0.1% | Jun 2, 2026 | Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure fil... |
| CVE-2021-4478 | HIGH | 8.3 | 0.1% | Jun 2, 2026 | Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerabili... |
| CVE-2021-46747 | HIGH | 7.1 | 0.1% | Jun 1, 2026 | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user sp... |
| CVE-2021-47980 | HIGH | 7.1 | 0.2% | May 16, 2026 | Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database ... |
| CVE-2021-47979 | HIGH | 8.8 | 0.4% | May 16, 2026 | WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated at... |
| CVE-2021-47977 | HIGH | 8.7 | 0.7% | May 16, 2026 | WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that... |
| CVE-2021-47976 | HIGH | 8.8 | 0.3% | May 16, 2026 | TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload a... |
| CVE-2021-47975 | HIGH | 7.2 | 0.2% | May 16, 2026 | WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inj... |
| CVE-2021-47974 | HIGH | 8.5 | 0.1% | May 16, 2026 | VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise serv... |
| CVE-2021-47973 | HIGH | 8.7 | 0.3% | May 16, 2026 | Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by p... |
| CVE-2021-47972 | HIGH | 8.7 | 0.3% | May 16, 2026 | Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the applica... |
| CVE-2021-47971 | HIGH | 8.7 | 0.3% | May 16, 2026 | My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting e... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now