2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40678 | MEDIUM | 5.4 | 0.5% | Jun 14, 2022 | In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=bat... |
| CVE-2021-40658 | MEDIUM | 4.8 | 0.5% | Jun 14, 2022 | Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”. |
| CVE-2021-40633 | HIGH | 8.8 | 1.5% | Jun 14, 2022 | A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of mem... |
| CVE-2021-40650 | MEDIUM | 6.5 | 0.7% | Jun 14, 2022 | In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set. |
| CVE-2021-40649 | MEDIUM | 6.5 | 0.8% | Jun 14, 2022 | In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set. |
| CVE-2021-40616 | MEDIUM | 6.5 | 0.7% | Jun 14, 2022 | thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account wit... |
| CVE-2021-37182 | HIGH | 7.5 | 0.6% | Jun 14, 2022 | A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All version... |
| CVE-2021-35130 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT,... |
| CVE-2021-35129 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon ... |
| CVE-2021-35126 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, ... |
| CVE-2021-35123 | HIGH | 8.8 | 0.3% | Jun 14, 2022 | Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Conne... |
| CVE-2021-35121 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx dr... |
| CVE-2021-35120 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | Improper handling between export and release functions on the same handle from client can lead to use after free in Snap... |
| CVE-2021-35119 | MEDIUM | 5.5 | 0.1% | Jun 14, 2022 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snap... |
| CVE-2021-35118 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Com... |
| CVE-2021-35116 | HIGH | 7.1 | 0.2% | Jun 14, 2022 | APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there i... |
| CVE-2021-35114 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto |
| CVE-2021-35112 | HIGH | 7.8 | 0.1% | Jun 14, 2022 | A user with user level permission can access graphics protected region due to improper access control in register config... |
| CVE-2021-35111 | MEDIUM | 5.9 | 0.4% | Jun 14, 2022 | Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivi... |
| CVE-2021-35104 | CRITICAL | 9.8 | 0.7% | Jun 14, 2022 | Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdr... |
| CVE-2021-35102 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdr... |
| CVE-2021-35101 | MEDIUM | 6.5 | 0.1% | Jun 14, 2022 | Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, ... |
| CVE-2021-35100 | HIGH | 7.5 | 0.6% | Jun 14, 2022 | Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdra... |
| CVE-2021-35098 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co... |
| CVE-2021-35096 | HIGH | 7.5 | 0.6% | Jun 14, 2022 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdrago... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now