2021 CVE Vulnerabilities

23,476 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-37061HIGH7.5There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerab...
CVE-2021-37060HIGH7.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ma...
CVE-2021-37057HIGH7.5There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnera...
CVE-2021-37048HIGH7.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ma...
CVE-2021-37043HIGH7.5There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ...
CVE-2021-37014HIGH7.5There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ...
CVE-2021-37047HIGH7.5There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus...
CVE-2021-37046HIGH7.5There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful exploitation of thi...
CVE-2021-37038HIGH7.5There is an Improper access control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may...
CVE-2021-42133HIGH8.1An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to th...
CVE-2021-42132HIGH8.8A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail...
CVE-2021-42131HIGH8.8A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Serv...
CVE-2021-42130HIGH8.8A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access...
CVE-2021-42129HIGH8.8A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail...
CVE-2021-42126HIGH8.8An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access t...
CVE-2021-42125HIGH8.8An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the ...
CVE-2021-42124HIGH8.8An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the I...
CVE-2021-22956HIGH7.5An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that cou...
CVE-2021-22955HIGH7.5A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when conf...
CVE-2021-28703HIGH7grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain X...
CVE-2021-44513HIGH7Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity...
CVE-2021-44512HIGH7World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to comp...
CVE-2021-44686HIGH7.5calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) i...
CVE-2021-31631HIGH8.8b2evolution CMS v7.2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the User login page. This vulne...
CVE-2021-4075HIGH7.2snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now