2021 CVE Vulnerabilities

23,476 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-45101HIGH8.1An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-li...
CVE-2021-45100HIGH7.5The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even tho...
CVE-2021-45099HIGH8.8The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an atta...
CVE-2021-45098HIGH7.5An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an R...
CVE-2021-44023HIGH7.1A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products c...
CVE-2021-43833HIGH8.8eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability wh...
CVE-2021-45017HIGH8.8Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on...
CVE-2021-45078HIGH7.8stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-base...
CVE-2021-43836HIGH8.8Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker ca...
CVE-2021-43835HIGH7.2Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who...
CVE-2021-43831HIGH7.7Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5....
CVE-2021-43806HIGH8.8Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected v...
CVE-2021-43782HIGH7.2Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. This is a fol...
CVE-2021-41276HIGH7.2Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected v...
CVE-2021-27859HIGH8.8A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t...
CVE-2021-27857HIGH7.5A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t...
CVE-2021-27855HIGH8.8FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated atta...
CVE-2021-39653HIGH7.8In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This...
CVE-2021-39651HIGH7.8In TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN confirmation due to a missing perm...
CVE-2021-39646HIGH7.5Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A
CVE-2021-39640HIGH7.8In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to...
CVE-2021-1048HIGH7.8In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead...
CVE-2021-1045HIGH7.5Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A
CVE-2021-1044HIGH7.8In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a ...
CVE-2021-1040HIGH7.8In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This ...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now