2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45487 | HIGH | 7.5 | 1.0% | Dec 25, 2021 | In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures. |
| CVE-2021-45485 | HIGH | 7.5 | 3.6% | Dec 25, 2021 | In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of ... |
| CVE-2021-45484 | HIGH | 7.5 | 1.0% | Dec 25, 2021 | In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG. |
| CVE-2021-23490 | HIGH | 7.5 | 1.8% | Dec 24, 2021 | The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkH... |
| CVE-2021-23772 | HIGH | 8.8 | 1.8% | Dec 24, 2021 | This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The u... |
| CVE-2021-20874 | HIGH | 7.5 | 1.3% | Dec 24, 2021 | Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, G... |
| CVE-2021-20827 | HIGH | 7.5 | 0.6% | Dec 24, 2021 | Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earli... |
| CVE-2021-20826 | HIGH | 7.6 | 0.4% | Dec 24, 2021 | Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and ... |
| CVE-2021-45470 | HIGH | 7.5 | 1.9% | Dec 23, 2021 | lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular ex... |
| CVE-2021-3621 | HIGH | 8.8 | 2.5% | Dec 23, 2021 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cach... |
| CVE-2021-44542 | HIGH | 7.5 | 1.2% | Dec 23, 2021 | A memory leak vulnerability was found in Privoxy when handling errors. |
| CVE-2021-44541 | HIGH | 7.5 | 1.4% | Dec 23, 2021 | A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory whe... |
| CVE-2021-44540 | HIGH | 7.5 | 1.3% | Dec 23, 2021 | A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec ... |
| CVE-2021-43989 | HIGH | 7.5 | 0.7% | Dec 23, 2021 | mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously ... |
| CVE-2021-3584 | HIGH | 7.2 | 3.9% | Dec 23, 2021 | A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendm... |
| CVE-2021-35243 | HIGH | 7.5 | 0.9% | Dec 23, 2021 | The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to exe... |
| CVE-2021-20318 | HIGH | 7.2 | 1.7% | Dec 23, 2021 | The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use th... |
| CVE-2021-45469 | HIGH | 7.8 | 0.5% | Dec 23, 2021 | In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when ... |
| CVE-2021-40161 | HIGH | 7.8 | 1.4% | Dec 23, 2021 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earli... |
| CVE-2021-40160 | HIGH | 7.8 | 1.5% | Dec 23, 2021 | PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF ... |
| CVE-2021-4118 | HIGH | 7.8 | 1.0% | Dec 23, 2021 | pytorch-lightning is vulnerable to Deserialization of Untrusted Data |
| CVE-2021-43854 | HIGH | 7.5 | 2.7% | Dec 23, 2021 | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research a... |
| CVE-2021-23175 | HIGH | 8.2 | 0.4% | Dec 23, 2021 | NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply indi... |
| CVE-2021-44600 | HIGH | 7.5 | 1.3% | Dec 23, 2021 | The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injectio... |
| CVE-2021-44599 | HIGH | 7.5 | 1.2% | Dec 23, 2021 | The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now