2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22650 | CRITICAL | 9.8 | 1.0% | Jul 28, 2022 | An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWin... |
| CVE-2021-22648 | CRITICAL | 9.8 | 0.7% | Jul 28, 2022 | Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file. |
| CVE-2021-22646 | CRITICAL | 9.8 | 1.1% | Jul 28, 2022 | The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TB... |
| CVE-2021-22644 | CRITICAL | 9.8 | 0.7% | Jul 28, 2022 | Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key. |
| CVE-2021-22642 | HIGH | 7.5 | 0.7% | Jul 28, 2022 | An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system. |
| CVE-2021-22640 | CRITICAL | 9.8 | 0.7% | Jul 28, 2022 | An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks. |
| CVE-2021-33371 | MEDIUM | 5.4 | 0.5% | Jul 28, 2022 | A stored cross-site scripting (XSS) vulnerability in /nav_bar_action.php of Student Management System v1.0 allows attack... |
| CVE-2021-46830 | MEDIUM | 6.5 | 0.8% | Jul 27, 2022 | A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhe... |
| CVE-2021-42537 | HIGH | 7.5 | 0.4% | Jul 27, 2022 | VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents... |
| CVE-2021-42535 | MEDIUM | 6.1 | 0.4% | Jul 27, 2022 | VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is p... |
| CVE-2021-38417 | HIGH | 7.5 | 0.6% | Jul 27, 2022 | VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an un... |
| CVE-2021-38410 | HIGH | 7.8 | 0.2% | Jul 27, 2022 | AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijac... |
| CVE-2021-40180 | HIGH | 7.5 | 1.1% | Jul 26, 2022 | In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's addr... |
| CVE-2021-33057 | HIGH | 7.5 | 1.0% | Jul 26, 2022 | The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCE... |
| CVE-2021-33468 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c. |
| CVE-2021-33467 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in pp_getline() in modules/preprocs/nasm/nasm-p... |
| CVE-2021-33466 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/preproc... |
| CVE-2021-33465 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preproc... |
| CVE-2021-33464 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/n... |
| CVE-2021-33463 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libyas... |
| CVE-2021-33462 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.c... |
| CVE-2021-33461 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c. |
| CVE-2021-33460 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in if_condition() in modules/preprocs... |
| CVE-2021-33459 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules... |
| CVE-2021-33458 | MEDIUM | 5.5 | 0.3% | Jul 26, 2022 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find_cc() in modules/preprocs/nasm... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now