2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27505 | HIGH | 7.5 | 1.0% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing informa... |
| CVE-2021-46789 | HIGH | 7.5 | 0.6% | May 13, 2022 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability. |
| CVE-2021-46788 | HIGH | 7.5 | 0.5% | May 13, 2022 | Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability ma... |
| CVE-2021-46787 | HIGH | 7.5 | 0.7% | May 13, 2022 | The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may caus... |
| CVE-2021-46786 | CRITICAL | 9.8 | 0.7% | May 13, 2022 | The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation... |
| CVE-2021-46785 | MEDIUM | 5.3 | 0.5% | May 13, 2022 | The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique d... |
| CVE-2021-22275 | HIGH | 8.6 | 0.9% | May 13, 2022 | Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to st... |
| CVE-2021-42969 | HIGH | 8.8 | 1.8% | May 13, 2022 | Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a ... |
| CVE-2021-42967 | CRITICAL | 9.8 | 1.0% | May 13, 2022 | Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus a... |
| CVE-2021-27777 | HIGH | 7.5 | 0.8% | May 12, 2022 | XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input... |
| CVE-2021-27773 | MEDIUM | 4.3 | 0.4% | May 12, 2022 | This vulnerability allows users to execute a clickjacking attack in the meeting's chat. |
| CVE-2021-27772 | MEDIUM | 6.5 | 0.6% | May 12, 2022 | Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users... |
| CVE-2021-27771 | HIGH | 7.6 | 0.7% | May 12, 2022 | User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. W... |
| CVE-2021-27770 | HIGH | 8.8 | 0.7% | May 12, 2022 | The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then reque... |
| CVE-2021-27769 | MEDIUM | 5.3 | 0.7% | May 12, 2022 | Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system. ... |
| CVE-2021-27768 | MEDIUM | 5.9 | 0.3% | May 12, 2022 | Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensiti... |
| CVE-2021-27500 | HIGH | 7.5 | 1.2% | May 12, 2022 | A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ... |
| CVE-2021-27498 | HIGH | 7.5 | 1.2% | May 12, 2022 | A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ... |
| CVE-2021-27482 | HIGH | 7.5 | 1.2% | May 12, 2022 | A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ... |
| CVE-2021-27478 | HIGH | 7.5 | 1.0% | May 12, 2022 | A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ... |
| CVE-2021-26386 | HIGH | 7.8 | 0.3% | May 12, 2022 | A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootlo... |
| CVE-2021-26368 | MEDIUM | 4.4 | 0.1% | May 12, 2022 | Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser priv... |
| CVE-2021-26363 | MEDIUM | 4.4 | 0.2% | May 12, 2022 | A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to on... |
| CVE-2021-26317 | HIGH | 7.8 | 0.3% | May 12, 2022 | Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a ... |
| CVE-2021-22531 | MEDIUM | 6.1 | 0.5% | May 12, 2022 | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scrip... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now