2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21879 | HIGH | 8.8 | 3.7% | Dec 22, 2021 | A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.... |
| CVE-2021-45266 | HIGH | 7.5 | 1.1% | Dec 22, 2021 | A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a s... |
| CVE-2021-43804 | HIGH | 7.3 | 2.2% | Dec 22, 2021 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto... |
| CVE-2021-43630 | HIGH | 8.8 | 2.0% | Dec 22, 2021 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php.... |
| CVE-2021-45419 | HIGH | 8.8 | 0.6% | Dec 22, 2021 | Certain Starcharge products are affected by Improper Input Validation. The affected products include: Nova 360 Cabinet <... |
| CVE-2021-44733 | HIGH | 7 | 0.7% | Dec 22, 2021 | A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs b... |
| CVE-2021-45418 | HIGH | 8.8 | 2.1% | Dec 22, 2021 | Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 ... |
| CVE-2021-36750 | HIGH | 8.1 | 13.5% | Dec 22, 2021 | ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the pass... |
| CVE-2021-43851 | HIGH | 8.8 | 1.2% | Dec 22, 2021 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability ex... |
| CVE-2021-44860 | HIGH | 7.8 | 0.8% | Dec 21, 2021 | An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.1... |
| CVE-2021-44859 | HIGH | 7.8 | 0.8% | Dec 21, 2021 | An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.1... |
| CVE-2021-44423 | HIGH | 7.8 | 0.8% | Dec 21, 2021 | An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer be... |
| CVE-2021-44422 | HIGH | 7.8 | 0.9% | Dec 21, 2021 | An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before... |
| CVE-2021-45290 | HIGH | 7.5 | 1.5% | Dec 21, 2021 | A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable. |
| CVE-2021-44207 | HIGH | 8.1 | 17.6% | Dec 21, 2021 | Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. |
| CVE-2021-27449 | HIGH | 8.8 | 3.1% | Dec 21, 2021 | Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute comman... |
| CVE-2021-27445 | HIGH | 7.8 | 0.2% | Dec 21, 2021 | Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges ... |
| CVE-2021-44877 | HIGH | 7.5 | 1.0% | Dec 21, 2021 | Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP s... |
| CVE-2021-44874 | HIGH | 8.8 | 1.0% | Dec 21, 2021 | Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam ap... |
| CVE-2021-43839 | HIGH | 7.5 | 1.3% | Dec 21, 2021 | Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to... |
| CVE-2021-36350 | HIGH | 7.5 | 1.1% | Dec 21, 2021 | Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authen... |
| CVE-2021-36337 | HIGH | 7.4 | 0.4% | Dec 21, 2021 | Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 whi... |
| CVE-2021-36316 | HIGH | 7.2 | 0.7% | Dec 21, 2021 | Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability ... |
| CVE-2021-24981 | HIGH | 7.5 | 0.8% | Dec 21, 2021 | The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leadi... |
| CVE-2021-24846 | HIGH | 8.8 | 1.3% | Dec 21, 2021 | The get_query() function of the Ni WooCommerce Custom Order Status WordPress plugin before 1.9.7, used by the niwoocos_a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now