2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23244 | HIGH | 7.8 | 0.6% | Dec 27, 2021 | ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But s... |
| CVE-2021-21751 | HIGH | 8.1 | 0.8% | Dec 27, 2021 | ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and ba... |
| CVE-2021-21750 | HIGH | 7.8 | 0.3% | Dec 27, 2021 | ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task mod... |
| CVE-2021-45339 | HIGH | 7.8 | 0.3% | Dec 27, 2021 | Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "... |
| CVE-2021-45338 | HIGH | 7.8 | 0.4% | Dec 27, 2021 | Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privi... |
| CVE-2021-45337 | HIGH | 8.8 | 0.4% | Dec 27, 2021 | Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with ... |
| CVE-2021-45336 | HIGH | 8.8 | 0.5% | Dec 27, 2021 | Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed co... |
| CVE-2021-45335 | HIGH | 8.8 | 0.4% | Dec 27, 2021 | Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to con... |
| CVE-2021-4173 | HIGH | 7.8 | 1.6% | Dec 27, 2021 | vim is vulnerable to Use After Free |
| CVE-2021-24998 | HIGH | 7.5 | 1.2% | Dec 27, 2021 | The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly gen... |
| CVE-2021-24753 | HIGH | 7.2 | 1.5% | Dec 27, 2021 | The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the p... |
| CVE-2021-45711 | HIGH | 7.5 | 1.3% | Dec 27, 2021 | An issue was discovered in the simple_asn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied... |
| CVE-2021-45710 | HIGH | 8.1 | 1.2% | Dec 27, 2021 | An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain ci... |
| CVE-2021-45708 | HIGH | 7.5 | 1.0% | Dec 27, 2021 | An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insuffici... |
| CVE-2021-45704 | HIGH | 8.1 | 0.7% | Dec 27, 2021 | An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption beca... |
| CVE-2021-45702 | HIGH | 7.5 | 1.1% | Dec 27, 2021 | An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-f... |
| CVE-2021-45700 | HIGH | 7.5 | 1.1% | Dec 27, 2021 | An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blo... |
| CVE-2021-45699 | HIGH | 7.5 | 1.5% | Dec 27, 2021 | An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack ag... |
| CVE-2021-45694 | HIGH | 7.5 | 1.1% | Dec 27, 2021 | An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locati... |
| CVE-2021-45681 | HIGH | 7.5 | 1.1% | Dec 27, 2021 | An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference (and memory corruption)... |
| CVE-2021-45680 | HIGH | 7.5 | 1.1% | Dec 27, 2021 | An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a co... |
| CVE-2021-45720 | HIGH | 7.5 | 1.2% | Dec 26, 2021 | An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by ... |
| CVE-2021-45719 | HIGH | 7.5 | 1.2% | Dec 26, 2021 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. update_hook has a ... |
| CVE-2021-45718 | HIGH | 7.5 | 1.2% | Dec 26, 2021 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollback_hook has ... |
| CVE-2021-45717 | HIGH | 7.5 | 1.2% | Dec 26, 2021 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commit_hook has a ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now