2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45885 | HIGH | 7.5 | 0.9% | Dec 29, 2021 | An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific upd... |
| CVE-2021-23727 | HIGH | 7.5 | 3.9% | Dec 29, 2021 | This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result ... |
| CVE-2021-36723 | HIGH | 7.5 | 0.5% | Dec 29, 2021 | Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predic... |
| CVE-2021-38688 | HIGH | 7.5 | 0.8% | Dec 29, 2021 | An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability... |
| CVE-2021-25991 | HIGH | 7.3 | 0.8% | Dec 29, 2021 | In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins ... |
| CVE-2021-44161 | HIGH | 8.8 | 0.5% | Dec 29, 2021 | Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input... |
| CVE-2021-44160 | HIGH | 7.3 | 1.1% | Dec 29, 2021 | Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire anoth... |
| CVE-2021-43556 | HIGH | 7.8 | 2.1% | Dec 28, 2021 | FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing projec... |
| CVE-2021-43554 | HIGH | 7.8 | 1.9% | Dec 28, 2021 | FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files... |
| CVE-2021-42583 | HIGH | 7.5 | 0.7% | Dec 28, 2021 | A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that ma... |
| CVE-2021-35032 | HIGH | 7.8 | 0.2% | Dec 28, 2021 | A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local u... |
| CVE-2021-35031 | HIGH | 8 | 0.5% | Dec 28, 2021 | A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware... |
| CVE-2021-20873 | HIGH | 8.1 | 0.8% | Dec 28, 2021 | Yappli is an application development platform which provides the function to access a requested URL using Custom URL Sch... |
| CVE-2021-45911 | HIGH | 7.8 | 0.9% | Dec 28, 2021 | An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attack... |
| CVE-2021-45910 | HIGH | 7.8 | 0.9% | Dec 28, 2021 | An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an at... |
| CVE-2021-45909 | HIGH | 7.8 | 0.9% | Dec 28, 2021 | An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. ... |
| CVE-2021-45908 | HIGH | 7.8 | 0.7% | Dec 28, 2021 | An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has ... |
| CVE-2021-45907 | HIGH | 7.8 | 0.7% | Dec 28, 2021 | An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has li... |
| CVE-2021-45896 | HIGH | 8.8 | 1.6% | Dec 27, 2021 | Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via is_ctc_admin=1 to login_we... |
| CVE-2021-45884 | HIGH | 7.5 | 2.7% | Dec 27, 2021 | In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fa... |
| CVE-2021-43858 | HIGH | 8.8 | 35.5% | Dec 27, 2021 | MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious... |
| CVE-2021-4161 | HIGH | 7.5 | 0.7% | Dec 27, 2021 | The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login ... |
| CVE-2021-43857 | HIGH | 8.8 | 55.6% | Dec 27, 2021 | Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code executi... |
| CVE-2021-33017 | HIGH | 8.8 | 0.5% | Dec 27, 2021 | The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the prod... |
| CVE-2021-32993 | HIGH | 8.8 | 0.3% | Dec 27, 2021 | IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now