2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22968 | HIGH | 7.2 | 3.1% | Nov 19, 2021 | A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Co... |
| CVE-2021-22967 | HIGH | 7.5 | 1.1% | Nov 19, 2021 | In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allows Unauthenticated User to Access Restricted Files If Allowe... |
| CVE-2021-22966 | HIGH | 8.8 | 0.9% | Nov 19, 2021 | Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below. If a group is granted "... |
| CVE-2021-22965 | HIGH | 7.5 | 2.1% | Nov 19, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial ... |
| CVE-2021-22951 | HIGH | 7.5 | 1.1% | Nov 19, 2021 | Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) p... |
| CVE-2021-21900 | HIGH | 8.8 | 2.5% | Nov 19, 2021 | A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f... |
| CVE-2021-21899 | HIGH | 8.8 | 2.7% | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2... |
| CVE-2021-41569 | HIGH | 7.5 | 7.8% | Nov 19, 2021 | SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the app... |
| CVE-2021-44037 | HIGH | 7.5 | 0.8% | Nov 19, 2021 | Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning. |
| CVE-2021-44036 | HIGH | 8.8 | 0.4% | Nov 19, 2021 | Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import. |
| CVE-2021-3962 | HIGH | 7.8 | 5.8% | Nov 19, 2021 | A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert proce... |
| CVE-2021-39929 | HIGH | 7.5 | 3.6% | Nov 19, 2021 | Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of s... |
| CVE-2021-39926 | HIGH | 7.5 | 7.5% | Nov 19, 2021 | Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injec... |
| CVE-2021-39925 | HIGH | 7.5 | 7.9% | Nov 19, 2021 | Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service ... |
| CVE-2021-39924 | HIGH | 7.5 | 4.9% | Nov 19, 2021 | Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via p... |
| CVE-2021-39923 | HIGH | 7.5 | 1.5% | Nov 19, 2021 | Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet inj... |
| CVE-2021-39922 | HIGH | 7.5 | 5.2% | Nov 19, 2021 | Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via pac... |
| CVE-2021-39921 | HIGH | 7.5 | 3.2% | Nov 19, 2021 | NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service ... |
| CVE-2021-29329 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function ... |
| CVE-2021-29328 | HIGH | 7.1 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sour... |
| CVE-2021-29327 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable... |
| CVE-2021-29326 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/x... |
| CVE-2021-29325 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function ... |
| CVE-2021-29324 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c... |
| CVE-2021-43408 | HIGH | 8.8 | 9.8% | Nov 19, 2021 | The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vu... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now