2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0193 | HIGH | 7.2 | 0.9% | May 12, 2022 | Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user... |
| CVE-2021-0190 | HIGH | 7.8 | 0.3% | May 12, 2022 | Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable a... |
| CVE-2021-0189 | HIGH | 7.8 | 0.3% | May 12, 2022 | Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pote... |
| CVE-2021-0188 | HIGH | 7.8 | 0.3% | May 12, 2022 | Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileg... |
| CVE-2021-0159 | HIGH | 7.8 | 0.3% | May 12, 2022 | Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user... |
| CVE-2021-0155 | MEDIUM | 5.5 | 0.3% | May 12, 2022 | Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enab... |
| CVE-2021-0154 | HIGH | 7.8 | 0.3% | May 12, 2022 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e... |
| CVE-2021-0153 | HIGH | 7.8 | 0.3% | May 12, 2022 | Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable ... |
| CVE-2021-0126 | HIGH | 8 | 0.4% | May 12, 2022 | Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to... |
| CVE-2021-42863 | CRITICAL | 9.8 | 1.6% | May 12, 2022 | A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to con... |
| CVE-2021-42648 | MEDIUM | 6.1 | 0.8% | May 11, 2022 | Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrar... |
| CVE-2021-42646 | CRITICAL | 9.1 | 3.7% | May 11, 2022 | XML External Entity (XXE) vulnerability in the file based service provider creation feature of the Management Console in... |
| CVE-2021-36614 | MEDIUM | 6.5 | 2.1% | May 11, 2022 | Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An au... |
| CVE-2021-36613 | MEDIUM | 6.5 | 2.1% | May 11, 2022 | Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticat... |
| CVE-2021-34085 | CRITICAL | 9.8 | 1.7% | May 11, 2022 | Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows rem... |
| CVE-2021-33317 | HIGH | 7.5 | 0.9% | May 11, 2022 | The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability... |
| CVE-2021-33316 | CRITICAL | 9.8 | 1.0% | May 11, 2022 | The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This... |
| CVE-2021-33315 | CRITICAL | 9.8 | 1.0% | May 11, 2022 | The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This... |
| CVE-2021-31330 | MEDIUM | 5.4 | 0.8% | May 11, 2022 | A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authen... |
| CVE-2021-28290 | MEDIUM | 6.1 | 0.6% | May 11, 2022 | A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to t... |
| CVE-2021-46744 | MEDIUM | 6.5 | 0.3% | May 11, 2022 | An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by mo... |
| CVE-2021-30361 | MEDIUM | 6.7 | 4.1% | May 11, 2022 | The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients setti... |
| CVE-2021-26400 | MEDIUM | 4 | 0.2% | May 11, 2022 | AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple ... |
| CVE-2021-26388 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposin... |
| CVE-2021-26378 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that coul... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now