2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40012 | HIGH | 7.5 | 0.7% | Jul 12, 2022 | Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitatio... |
| CVE-2021-39999 | HIGH | 7.5 | 0.6% | Jul 12, 2022 | There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploi... |
| CVE-2021-38289 | HIGH | 8.8 | 1.2% | Jul 12, 2022 | An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allow... |
| CVE-2021-36668 | HIGH | 7.8 | 0.6% | Jul 12, 2022 | URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parame... |
| CVE-2021-36667 | HIGH | 7.8 | 1.5% | Jul 12, 2022 | Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via craf... |
| CVE-2021-36666 | HIGH | 7.8 | 0.4% | Jul 12, 2022 | An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDeco... |
| CVE-2021-36665 | HIGH | 7.8 | 0.5% | Jul 12, 2022 | An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgr... |
| CVE-2021-44222 | CRITICAL | 9.1 | 1.1% | Jul 12, 2022 | A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service o... |
| CVE-2021-44221 | HIGH | 7.5 | 1.2% | Jul 12, 2022 | A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not p... |
| CVE-2021-41037 | HIGH | 8 | 0.7% | Jul 8, 2022 | In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local machine via touchpoin... |
| CVE-2021-41042 | MEDIUM | 5.3 | 0.9% | Jul 7, 2022 | In Eclipse Lyo versions 1.0.0 to 4.1.0, a TransformerFactory is initialized with the defaults that do not restrict DTD l... |
| CVE-2021-35283 | CRITICAL | 9.8 | 0.9% | Jul 7, 2022 | SQL Injection vulnerability in product_admin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via... |
| CVE-2021-29281 | CRITICAL | 9.8 | 1.9% | Jul 7, 2022 | File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik ... |
| CVE-2021-44791 | MEDIUM | 6.1 | 1.9% | Jul 7, 2022 | In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back i... |
| CVE-2021-31645 | HIGH | 7.5 | 1.7% | Jul 7, 2022 | An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the conn... |
| CVE-2021-46825 | CRITICAL | 9.1 | 1.4% | Jul 7, 2022 | Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauth... |
| CVE-2021-4234 | HIGH | 7.5 | 0.8% | Jul 6, 2022 | OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset pac... |
| CVE-2021-3697 | HIGH | 7 | 0.4% | Jul 6, 2022 | A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written... |
| CVE-2021-3696 | MEDIUM | 4.5 | 0.4% | Jul 6, 2022 | A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data cor... |
| CVE-2021-3695 | MEDIUM | 4.5 | 0.4% | Jul 6, 2022 | A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage ... |
| CVE-2021-37839 | MEDIUM | 4.3 | 1.1% | Jul 6, 2022 | Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have... |
| CVE-2021-31679 | MEDIUM | 6.5 | 0.5% | Jul 6, 2022 | An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other ... |
| CVE-2021-31678 | MEDIUM | 6.5 | 0.5% | Jul 6, 2022 | An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user'... |
| CVE-2021-31677 | MEDIUM | 6.5 | 0.5% | Jul 6, 2022 | An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwor... |
| CVE-2021-31676 | MEDIUM | 6.1 | 0.7% | Jul 6, 2022 | A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruc... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now