2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37529 | MEDIUM | 5.5 | 0.7% | Jan 12, 2022 | A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, ... |
| CVE-2021-46225 | MEDIUM | 6.5 | 1.0% | Jan 12, 2022 | A buffer overflow in the GmfOpenMesh() function of libMeshb v7.61 allows attackers to cause a Denial of Service (DoS) vi... |
| CVE-2021-45449 | MEDIUM | 5.5 | 0.4% | Jan 12, 2022 | Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the us... |
| CVE-2021-42558 | MEDIUM | 6.1 | 1.1% | Jan 12, 2022 | An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may ... |
| CVE-2021-43960 | MEDIUM | 4.8 | 0.6% | Jan 12, 2022 | Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability. Exploitation requires administrator privileges... |
| CVE-2021-35500 | MEDIUM | 5.5 | 0.6% | Jan 12, 2022 | The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, ... |
| CVE-2021-28377 | MEDIUM | 5.3 | 8.2% | Jan 12, 2022 | ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files. |
| CVE-2021-43436 | MEDIUM | 5.4 | 0.6% | Jan 12, 2022 | MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. ... |
| CVE-2021-44649 | MEDIUM | 5.4 | 0.6% | Jan 12, 2022 | Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type,... |
| CVE-2021-46283 | MEDIUM | 5.5 | 0.3% | Jan 11, 2022 | nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denia... |
| CVE-2021-41767 | MEDIUM | 6.5 | 1.9% | Jan 11, 2022 | Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some ... |
| CVE-2021-43974 | MEDIUM | 5.3 | 1.4% | Jan 11, 2022 | An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, ... |
| CVE-2021-43972 | MEDIUM | 6.5 | 1.5% | Jan 11, 2022 | An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authe... |
| CVE-2021-29701 | MEDIUM | 4.3 | 0.7% | Jan 11, 2022 | IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could a... |
| CVE-2021-44647 | MEDIUM | 5.5 | 0.4% | Jan 11, 2022 | Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a l... |
| CVE-2021-37196 | MEDIUM | 6.5 | 0.8% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
| CVE-2021-37195 | MEDIUM | 6.1 | 0.5% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
| CVE-2021-36411 | MEDIUM | 5.5 | 1.2% | Jan 10, 2022 | An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in fun... |
| CVE-2021-36410 | MEDIUM | 5.5 | 0.9% | Jan 10, 2022 | A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running p... |
| CVE-2021-36408 | MEDIUM | 5.5 | 0.8% | Jan 10, 2022 | An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265... |
| CVE-2021-35452 | MEDIUM | 6.5 | 1.3% | Jan 10, 2022 | An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc. |
| CVE-2021-43951 | MEDIUM | 4.3 | 0.8% | Jan 10, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-43949 | MEDIUM | 4.3 | 0.8% | Jan 10, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-25047 | MEDIUM | 6.1 | 0.8% | Jan 10, 2022 | The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulner... |
| CVE-2021-25043 | MEDIUM | 6.1 | 0.9% | Jan 10, 2022 | The WOOCS WordPress plugin before 1.3.7.3 does not sanitise and escape the custom_prices parameter before outputting it ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now