2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42531 | HIGH | 7.8 | 3.6% | May 2, 2022 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially res... |
| CVE-2021-42530 | HIGH | 7.8 | 3.6% | May 2, 2022 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially res... |
| CVE-2021-42529 | HIGH | 7.8 | 3.6% | May 2, 2022 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially res... |
| CVE-2021-42528 | MEDIUM | 5.5 | 1.8% | May 2, 2022 | XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially craft... |
| CVE-2021-41810 | MEDIUM | 4.8 | 0.7% | May 2, 2022 | Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Ad... |
| CVE-2021-36844 | MEDIUM | 4.8 | 0.5% | May 2, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on W... |
| CVE-2021-3750 | HIGH | 8.2 | 0.5% | May 2, 2022 | A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointe... |
| CVE-2021-3643 | CRITICAL | 9.1 | 1.4% | May 2, 2022 | A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw a... |
| CVE-2021-29859 | MEDIUM | 6.8 | 0.3% | May 2, 2022 | IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0... |
| CVE-2021-25102 | MEDIUM | 4.7 | 0.7% | May 2, 2022 | The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect... |
| CVE-2021-25086 | MEDIUM | 6.1 | 1.3% | May 2, 2022 | The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting ... |
| CVE-2021-25002 | HIGH | 7.5 | 1.4% | May 2, 2022 | The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which co... |
| CVE-2021-32500 | — | — | — | May 2, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-4200 | MEDIUM | 5.4 | 0.6% | May 2, 2022 | A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restr... |
| CVE-2021-46790 | HIGH | 7.8 | 0.5% | May 2, 2022 | ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream positi... |
| CVE-2021-36784 | HIGH | 7.2 | 0.8% | May 2, 2022 | A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to... |
| CVE-2021-36778 | HIGH | 7.5 | 0.7% | May 2, 2022 | A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather cred... |
| CVE-2021-40822 | HIGH | 7.5 | 18.9% | May 2, 2022 | GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host. |
| CVE-2021-31674 | MEDIUM | 6.1 | 3.8% | May 2, 2022 | Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacke... |
| CVE-2021-31673 | MEDIUM | 6.1 | 3.4% | May 2, 2022 | A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remo... |
| CVE-2021-42001 | CRITICAL | 9.9 | 0.5% | Apr 30, 2022 | PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposu... |
| CVE-2021-41994 | MEDIUM | 4.8 | 0.2% | Apr 30, 2022 | A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to a... |
| CVE-2021-41993 | MEDIUM | 4.8 | 0.2% | Apr 30, 2022 | A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading ... |
| CVE-2021-41992 | MEDIUM | 5.6 | 0.5% | Apr 30, 2022 | A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading... |
| CVE-2021-4207 | HIGH | 8.2 | 0.4% | Apr 29, 2022 | A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now