2021 CVE Vulnerabilities

23,476 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-44176MEDIUM6.1AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS...
CVE-2021-43765MEDIUM6.1AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS...
CVE-2021-43764MEDIUM5.4AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS...
CVE-2021-43762MEDIUM6.5AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability ...
CVE-2021-43761MEDIUM5.4AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are a...
CVE-2021-45422MEDIUM6.1Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_proce...
CVE-2021-40576MEDIUM5.5The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in h...
CVE-2021-40575MEDIUM5.5The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in refram...
CVE-2021-40573MEDIUM5.5The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows atta...
CVE-2021-40572MEDIUM5.5The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows att...
CVE-2021-40813MEDIUM5.4A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote...
CVE-2021-40569MEDIUM5.5The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta....
CVE-2021-40567MEDIUM5.5Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c ...
CVE-2021-39056MEDIUM6.5The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to ...
CVE-2021-40327MEDIUM5.9Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key ...
CVE-2021-23824MEDIUM6.1This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipu...
CVE-2021-30314MEDIUM5.5Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Au...
CVE-2021-30313MEDIUM6.4Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in ...
CVE-2021-40566MEDIUM5.5A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process ...
CVE-2021-40565MEDIUM5.5A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_pars...
CVE-2021-40564MEDIUM5.5A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slic...
CVE-2021-40563MEDIUM5.5A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_d...
CVE-2021-40562MEDIUM5.5A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqu...
CVE-2021-40559MEDIUM5.5A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_na...
CVE-2021-37530MEDIUM5.5A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpi...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now