2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37935 | HIGH | 7.5 | 1.4% | Dec 10, 2021 | An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenti... |
| CVE-2021-29214 | HIGH | 7.2 | 1.1% | Dec 10, 2021 | A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administr... |
| CVE-2021-37189 | HIGH | 7.5 | 0.6% | Dec 10, 2021 | An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sen... |
| CVE-2021-37188 | HIGH | 8.8 | 0.5% | Dec 10, 2021 | An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firm... |
| CVE-2021-43803 | HIGH | 7.5 | 44.8% | Dec 10, 2021 | Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to ... |
| CVE-2021-43802 | HIGH | 8.8 | 2.0% | Dec 9, 2021 | Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file th... |
| CVE-2021-43982 | HIGH | 7.8 | 9.6% | Dec 9, 2021 | Delta Electronics CNCSoft Versions 1.01.30 and prior are vulnerable to a stack-based buffer overflow, which may allow an... |
| CVE-2021-37861 | HIGH | 7.5 | 0.9% | Dec 9, 2021 | Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails. |
| CVE-2021-41265 | HIGH | 8.8 | 1.3% | Dec 9, 2021 | Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentica... |
| CVE-2021-40282 | HIGH | 8.8 | 1.1% | Dec 9, 2021 | An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php. when registering ordinary... |
| CVE-2021-40281 | HIGH | 8.8 | 1.1% | Dec 9, 2021 | An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary use... |
| CVE-2021-39002 | HIGH | 7.5 | 0.9% | Dec 9, 2021 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expec... |
| CVE-2021-38951 | HIGH | 7.5 | 1.5% | Dec 9, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specia... |
| CVE-2021-29678 | HIGH | 8.7 | 1.1% | Dec 9, 2021 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user wit... |
| CVE-2021-22568 | HIGH | 8.8 | 0.9% | Dec 9, 2021 | When using the dart pub publish command to publish a package to a third-party package server, the request would be authe... |
| CVE-2021-20373 | HIGH | 7.5 | 1.5% | Dec 9, 2021 | IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as un... |
| CVE-2021-41246 | HIGH | 8.8 | 0.9% | Dec 9, 2021 | Express OpenID Connect is express JS middleware implementing sign on for Express web apps using OpenID Connect. Versions... |
| CVE-2021-40280 | HIGH | 7.2 | 1.1% | Dec 9, 2021 | An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php. |
| CVE-2021-40279 | HIGH | 7.2 | 1.1% | Dec 9, 2021 | An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php. |
| CVE-2021-21955 | HIGH | 7.5 | 1.0% | Dec 9, 2021 | An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary... |
| CVE-2021-20145 | HIGH | 7.5 | 1.2% | Dec 9, 2021 | Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon ... |
| CVE-2021-20144 | HIGH | 8.8 | 3.7% | Dec 9, 2021 | An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server ser... |
| CVE-2021-20143 | HIGH | 8.8 | 3.7% | Dec 9, 2021 | An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server ser... |
| CVE-2021-20142 | HIGH | 8.8 | 3.7% | Dec 9, 2021 | An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server ser... |
| CVE-2021-20141 | HIGH | 8.8 | 3.7% | Dec 9, 2021 | An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server ser... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now