2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21931 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_fi... |
| CVE-2021-21930 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_filt... |
| CVE-2021-21929 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_fi... |
| CVE-2021-21928 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_fil... |
| CVE-2021-21927 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21926 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21925 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21924 | MEDIUM | 6.5 | 20.2% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21923 | MEDIUM | 4.9 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21922 | MEDIUM | 6.5 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21921 | MEDIUM | 4.9 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21920 | MEDIUM | 4.9 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21919 | MEDIUM | 4.9 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21918 | MEDIUM | 4.9 | 1.1% | Dec 22, 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger ... |
| CVE-2021-21908 | MEDIUM | 6.5 | 1.4% | Dec 22, 2021 | Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attemp... |
| CVE-2021-21907 | MEDIUM | 4.9 | 1.4% | Dec 22, 2021 | A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Mo... |
| CVE-2021-21896 | MEDIUM | 6.5 | 2.2% | Dec 22, 2021 | A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 ... |
| CVE-2021-21886 | MEDIUM | 4.3 | 1.9% | Dec 22, 2021 | A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 8... |
| CVE-2021-21878 | MEDIUM | 4.9 | 1.2% | Dec 22, 2021 | A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix Prem... |
| CVE-2021-45267 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a... |
| CVE-2021-45263 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmen... |
| CVE-2021-45262 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault... |
| CVE-2021-45261 | MEDIUM | 5.5 | 0.7% | Dec 22, 2021 | An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service... |
| CVE-2021-45260 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentat... |
| CVE-2021-43158 | MEDIUM | 4.3 | 0.5% | Dec 22, 2021 | In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to rem... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now