2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-26376 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resultin... |
| CVE-2021-26375 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to... |
| CVE-2021-26373 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could resu... |
| CVE-2021-26372 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address... |
| CVE-2021-26364 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM ... |
| CVE-2021-26350 | MEDIUM | 4.7 | 0.1% | May 11, 2022 | A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register ... |
| CVE-2021-26349 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into ... |
| CVE-2021-26348 | MEDIUM | 5.5 | 0.2% | May 11, 2022 | Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device ... |
| CVE-2021-26347 | MEDIUM | 4.7 | 0.2% | May 11, 2022 | Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an i... |
| CVE-2021-26342 | LOW | 3.3 | 0.2% | May 11, 2022 | In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of op... |
| CVE-2021-26339 | MEDIUM | 5.5 | 0.3% | May 11, 2022 | A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU c... |
| CVE-2021-43066 | HIGH | 7.8 | 0.2% | May 11, 2022 | A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below,... |
| CVE-2021-3611 | MEDIUM | 6.5 | 0.5% | May 11, 2022 | A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use t... |
| CVE-2021-39059 | MEDIUM | 5.4 | 0.4% | May 11, 2022 | IBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting. ... |
| CVE-2021-38969 | CRITICAL | 9.8 | 0.7% | May 11, 2022 | IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of suppo... |
| CVE-2021-44167 | HIGH | 7.5 | 0.5% | May 11, 2022 | An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 ... |
| CVE-2021-43081 | MEDIUM | 6.1 | 0.8% | May 11, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below... |
| CVE-2021-42651 | HIGH | 8.8 | 1.5% | May 11, 2022 | A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated ... |
| CVE-2021-37851 | HIGH | 7.8 | 0.2% | May 11, 2022 | Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair featu... |
| CVE-2021-34606 | HIGH | 7.3 | 0.4% | May 11, 2022 | A vulnerability exists in XINJE XD/E Series PLC Program Tool in versions up to v3.5.1 that can allow an authenticated, l... |
| CVE-2021-34605 | HIGH | 7.3 | 2.3% | May 11, 2022 | A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitra... |
| CVE-2021-3254 | HIGH | 7.5 | 1.7% | May 11, 2022 | Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP SYN scan using nmap. |
| CVE-2021-39738 | HIGH | 7.8 | 0.1% | May 10, 2022 | In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This co... |
| CVE-2021-39700 | MEDIUM | 5.5 | 0.1% | May 10, 2022 | In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results.... |
| CVE-2021-39670 | MEDIUM | 5.5 | 0.2% | May 10, 2022 | In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now