2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4172 | MEDIUM | 5.4 | 0.6% | Jan 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2. |
| CVE-2021-46313 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned... |
| CVE-2021-46311 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vr... |
| CVE-2021-46244 | MEDIUM | 6.5 | 1.0% | Jan 21, 2022 | A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This ... |
| CVE-2021-46243 | MEDIUM | 6.5 | 1.0% | Jan 21, 2022 | An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at ... |
| CVE-2021-46240 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager... |
| CVE-2021-46239 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at ... |
| CVE-2021-46238 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegrap... |
| CVE-2021-46237 | MEDIUM | 5.5 | 0.6% | Jan 21, 2022 | An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegrap... |
| CVE-2021-46236 | MEDIUM | 5.5 | 0.7% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scene... |
| CVE-2021-46234 | MEDIUM | 5.5 | 0.7% | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base... |
| CVE-2021-4032 | MEDIUM | 4.4 | 0.4% | Jan 21, 2022 | A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allo... |
| CVE-2021-4001 | MEDIUM | 4.1 | 0.2% | Jan 21, 2022 | A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a m... |
| CVE-2021-33966 | MEDIUM | 5.4 | 0.9% | Jan 21, 2022 | Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via ... |
| CVE-2021-33848 | MEDIUM | 6.1 | 0.6% | Jan 21, 2022 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scrip... |
| CVE-2021-33843 | MEDIUM | 5.3 | 0.8% | Jan 21, 2022 | Fresenius Kabi Agilia SP MC WiFi vD25 and prior has a default configuration page accessible without authentication. An a... |
| CVE-2021-23207 | MEDIUM | 5.5 | 0.2% | Jan 21, 2022 | An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for t... |
| CVE-2021-23195 | MEDIUM | 5.3 | 0.8% | Jan 21, 2022 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (dire... |
| CVE-2021-46351 | MEDIUM | 5.5 | 0.6% | Jan 20, 2022 | There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builti... |
| CVE-2021-46350 | MEDIUM | 5.5 | 0.6% | Jan 20, 2022 | There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in ... |
| CVE-2021-46349 | MEDIUM | 5.5 | 0.6% | Jan 20, 2022 | There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/op... |
| CVE-2021-46348 | MEDIUM | 5.5 | 0.6% | Jan 20, 2022 | There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storage... |
| CVE-2021-46347 | MEDIUM | 5.5 | 0.6% | Jan 20, 2022 | There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-object... |
| CVE-2021-46346 | MEDIUM | 5.5 | 0.6% | Jan 20, 2022 | There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builti... |
| CVE-2021-46345 | MEDIUM | 5.5 | 0.6% | Jan 20, 2022 | There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now