2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46784 | MEDIUM | 6.5 | 3.6% | Jul 17, 2022 | In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Servic... |
| CVE-2021-40149 | MEDIUM | 5.9 | 6.0% | Jul 17, 2022 | The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. ... |
| CVE-2021-24655 | HIGH | 7.5 | 0.8% | Jul 17, 2022 | The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related t... |
| CVE-2021-36711 | CRITICAL | 9.8 | 12.1% | Jul 16, 2022 | WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled. |
| CVE-2021-34538 | HIGH | 7.5 | 1.4% | Jul 16, 2022 | Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved ... |
| CVE-2021-34987 | HIGH | 8.2 | 0.3% | Jul 15, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (... |
| CVE-2021-34986 | HIGH | 7.8 | 0.2% | Jul 15, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (... |
| CVE-2021-36461 | HIGH | 8.8 | 0.8% | Jul 15, 2022 | An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upl... |
| CVE-2021-4135 | MEDIUM | 5.5 | 0.2% | Jul 14, 2022 | A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way u... |
| CVE-2021-26384 | HIGH | 7.8 | 0.2% | Jul 14, 2022 | A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info da... |
| CVE-2021-26382 | MEDIUM | 4.4 | 0.2% | Jul 14, 2022 | An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (AC... |
| CVE-2021-39028 | MEDIUM | 5.4 | 0.4% | Jul 14, 2022 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header i... |
| CVE-2021-39019 | MEDIUM | 6.5 | 0.7% | Jul 14, 2022 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitiv... |
| CVE-2021-39018 | MEDIUM | 4.3 | 0.5% | Jul 14, 2022 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive infor... |
| CVE-2021-39017 | MEDIUM | 6.5 | 0.8% | Jul 14, 2022 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker ... |
| CVE-2021-39016 | MEDIUM | 4.3 | 0.5% | Jul 14, 2022 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor ... |
| CVE-2021-39015 | MEDIUM | 5.4 | 0.4% | Jul 14, 2022 | IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vu... |
| CVE-2021-45492 | HIGH | 7.8 | 0.3% | Jul 14, 2022 | In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be th... |
| CVE-2021-27294 | — | — | — | Jul 13, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-46827 | MEDIUM | 6.1 | 0.4% | Jul 13, 2022 | An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS... |
| CVE-2021-39041 | MEDIUM | 5.3 | 0.9% | Jul 12, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not... |
| CVE-2021-46741 | HIGH | 7.5 | 0.6% | Jul 12, 2022 | The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of... |
| CVE-2021-41396 | HIGH | 7.5 | 1.2% | Jul 12, 2022 | Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a shor... |
| CVE-2021-40016 | MEDIUM | 6.5 | 0.3% | Jul 12, 2022 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will aff... |
| CVE-2021-40013 | MEDIUM | 6.5 | 0.2% | Jul 12, 2022 | Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will aff... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now