2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38413 | HIGH | 7.8 | 1.0% | Dec 20, 2021 | Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflo... |
| CVE-2021-38409 | HIGH | 7.8 | 0.7% | Dec 20, 2021 | Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized p... |
| CVE-2021-38401 | HIGH | 7.8 | 0.9% | Dec 20, 2021 | Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer derefer... |
| CVE-2021-36887 | HIGH | 8.8 | 0.5% | Dec 20, 2021 | Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – C... |
| CVE-2021-35244 | HIGH | 7.2 | 5.8% | Dec 20, 2021 | The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management ri... |
| CVE-2021-35234 | HIGH | 8.8 | 2.8% | Dec 20, 2021 | Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged esca... |
| CVE-2021-22057 | HIGH | 8.8 | 1.1% | Dec 20, 2021 | VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious acto... |
| CVE-2021-22056 | HIGH | 7.5 | 1.6% | Dec 20, 2021 | VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vul... |
| CVE-2021-43437 | HIGH | 8.8 | 1.2% | Dec 20, 2021 | In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the we... |
| CVE-2021-44224 | HIGH | 8.2 | 82.3% | Dec 20, 2021 | A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference... |
| CVE-2021-41561 | HIGH | 7.5 | 3.1% | Dec 20, 2021 | Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet f... |
| CVE-2021-44858 | HIGH | 7.5 | 1.3% | Dec 20, 2021 | An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to us... |
| CVE-2021-42913 | HIGH | 7.5 | 1.8% | Dec 20, 2021 | The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and clea... |
| CVE-2021-44162 | HIGH | 7.5 | 1.7% | Dec 20, 2021 | Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has imprope... |
| CVE-2021-4136 | HIGH | 7.8 | 1.8% | Dec 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-45041 | HIGH | 8.8 | 2.2% | Dec 19, 2021 | SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project mo... |
| CVE-2021-43083 | HIGH | 8.8 | 1.9% | Dec 19, 2021 | Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow f... |
| CVE-2021-4131 | HIGH | 8.8 | 0.5% | Dec 18, 2021 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-4130 | HIGH | 8.8 | 0.5% | Dec 18, 2021 | snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-41500 | HIGH | 7.5 | 1.2% | Dec 17, 2021 | Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholm... |
| CVE-2021-41499 | HIGH | 7.5 | 1.4% | Dec 17, 2021 | Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo < 1.03 in the Server_debug function, which allows remo... |
| CVE-2021-41498 | HIGH | 7.5 | 1.1% | Dec 17, 2021 | Buffer overflow in ajaxsoundstudio.com Pyo < and 1.03 in the Server_jack_init function. which allows attackers to cond... |
| CVE-2021-41497 | HIGH | 7.5 | 1.0% | Dec 17, 2021 | Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows atta... |
| CVE-2021-23814 | HIGH | 8.8 | 1.8% | Dec 17, 2021 | This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficien... |
| CVE-2021-43838 | HIGH | 7.5 | 1.4% | Dec 17, 2021 | jsx-slack is a library for building JSON objects for Slack Block Kit surfaces from JSX. In versions prior to 4.5.1 users... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now