2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3724 | — | — | — | Aug 23, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-3714 | MEDIUM | 5.9 | 1.1% | Aug 23, 2022 | A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication ... |
| CVE-2021-3702 | MEDIUM | 6.3 | 0.2% | Aug 23, 2022 | A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a te... |
| CVE-2021-3701 | MEDIUM | 6.6 | 0.3% | Aug 23, 2022 | A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world... |
| CVE-2021-3690 | HIGH | 7.5 | 1.4% | Aug 23, 2022 | A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This f... |
| CVE-2021-3670 | MEDIUM | 6.5 | 1.7% | Aug 23, 2022 | MaxQueryDuration not honoured in Samba AD DC LDAP |
| CVE-2021-31566 | HIGH | 7.8 | 0.4% | Aug 23, 2022 | An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control ... |
| CVE-2021-23177 | HIGH | 7.8 | 0.4% | Aug 23, 2022 | An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the t... |
| CVE-2021-23161 | — | — | — | Aug 23, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-23156 | — | — | — | Aug 23, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-20316 | MEDIUM | 6.8 | 0.8% | Aug 23, 2022 | A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permi... |
| CVE-2021-20304 | HIGH | 7.5 | 1.5% | Aug 23, 2022 | A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be pr... |
| CVE-2021-20298 | HIGH | 7.5 | 1.2% | Aug 23, 2022 | A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed ... |
| CVE-2021-42627 | CRITICAL | 9.8 | 67.9% | Aug 23, 2022 | The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without auth... |
| CVE-2021-42232 | CRITICAL | 9.8 | 3.2% | Aug 23, 2022 | TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnera... |
| CVE-2021-28861 | HIGH | 7.4 | 2.5% | Aug 23, 2022 | Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multipl... |
| CVE-2021-29891 | MEDIUM | 4.9 | 0.4% | Aug 22, 2022 | IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may cause... |
| CVE-2021-3484 | — | — | — | Aug 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-3408 | — | — | — | Aug 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-3659 | MEDIUM | 5.5 | 0.3% | Aug 22, 2022 | A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way t... |
| CVE-2021-3639 | MEDIUM | 6.1 | 0.8% | Aug 22, 2022 | A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an atta... |
| CVE-2021-3590 | HIGH | 8.8 | 0.6% | Aug 22, 2022 | A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password t... |
| CVE-2021-3586 | CRITICAL | 9.8 | 0.9% | Aug 22, 2022 | A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify whic... |
| CVE-2021-3521 | MEDIUM | 4.7 | 0.3% | Aug 22, 2022 | There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signa... |
| CVE-2021-3513 | HIGH | 7.5 | 0.7% | Aug 22, 2022 | A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now