2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30455 | CRITICAL | 9.8 | 1.1% | Apr 7, 2021 | An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clone_from up... |
| CVE-2021-30454 | CRITICAL | 9.8 | 1.1% | Apr 7, 2021 | An issue was discovered in the outer_cgi crate before 0.2.1 for Rust. A user-provided Read instance receives an uninitia... |
| CVE-2021-30246 | CRITICAL | 9.1 | 1.0% | Apr 7, 2021 | In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized ... |
| CVE-2021-21425 | CRITICAL | 9.8 | 80.5% | Apr 7, 2021 | Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versio... |
| CVE-2021-30177 | CRITICAL | 9.8 | 2.4% | Apr 7, 2021 | There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execut... |
| CVE-2021-26709 | CRITICAL | 9.8 | 40.1% | Apr 7, 2021 | D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated... |
| CVE-2021-24026 | CRITICAL | 9.8 | 1.4% | Apr 6, 2021 | A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, W... |
| CVE-2021-30045 | CRITICAL | 9.1 | 1.8% | Apr 6, 2021 | SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function. |
| CVE-2021-27698 | CRITICAL | 9.8 | 1.2% | Apr 6, 2021 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c throug... |
| CVE-2021-27697 | CRITICAL | 9.8 | 1.3% | Apr 6, 2021 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the g... |
| CVE-2021-27357 | CRITICAL | 9.8 | 1.2% | Apr 6, 2021 | RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c. |
| CVE-2021-28173 | CRITICAL | 9.8 | 1.6% | Apr 6, 2021 | The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers c... |
| CVE-2021-28171 | CRITICAL | 9.8 | 1.2% | Apr 6, 2021 | The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions... |
| CVE-2021-30164 | CRITICAL | 9.8 | 1.3% | Apr 6, 2021 | Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by lev... |
| CVE-2021-30149 | CRITICAL | 9.8 | 10.1% | Apr 6, 2021 | Composr 10.0.36 allows upload and execution of PHP files. |
| CVE-2021-20308 | CRITICAL | 9.8 | 2.5% | Apr 5, 2021 | Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of se... |
| CVE-2021-20307 | CRITICAL | 9.8 | 1.9% | Apr 5, 2021 | Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read a... |
| CVE-2021-24212 | CRITICAL | 9.8 | 7.9% | Apr 5, 2021 | The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) allo... |
| CVE-2021-24175 | CRITICAL | 9.8 | 14.5% | Apr 5, 2021 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious ac... |
| CVE-2021-24171 | CRITICAL | 9.8 | 1.9% | Apr 5, 2021 | The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions su... |
| CVE-2021-29996 | CRITICAL | 9.6 | 2.8% | Apr 5, 2021 | Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by... |
| CVE-2021-30072 | CRITICAL | 9.8 | 1.4% | Apr 2, 2021 | An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based... |
| CVE-2021-28940 | CRITICAL | 9.8 | 3.3% | Apr 2, 2021 | Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to... |
| CVE-2021-1871 | CRITICAL | 9.8 | 7.1% | Apr 2, 2021 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-... |
| CVE-2021-1870 | CRITICAL | 9.8 | 7.9% | Apr 2, 2021 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now