2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30255 | HIGH | 7.8 | 0.2% | Nov 12, 2021 | Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Comp... |
| CVE-2021-30254 | HIGH | 7.8 | 0.2% | Nov 12, 2021 | Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Aut... |
| CVE-2021-1982 | HIGH | 7.5 | 0.6% | Nov 12, 2021 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Sna... |
| CVE-2021-1979 | HIGH | 7.8 | 0.2% | Nov 12, 2021 | Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapd... |
| CVE-2021-1973 | HIGH | 7.8 | 0.1% | Nov 12, 2021 | A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon C... |
| CVE-2021-1921 | HIGH | 7 | 0.1% | Nov 12, 2021 | Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in S... |
| CVE-2021-1912 | HIGH | 7.8 | 0.1% | Nov 12, 2021 | Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon ... |
| CVE-2021-42773 | HIGH | 7.5 | 1.0% | Nov 12, 2021 | Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly... |
| CVE-2021-34420 | HIGH | 7.4 | 0.4% | Nov 11, 2021 | The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files ... |
| CVE-2021-34417 | HIGH | 7.2 | 1.2% | Nov 11, 2021 | The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.202... |
| CVE-2021-3910 | HIGH | 7.5 | 1.3% | Nov 11, 2021 | OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character). |
| CVE-2021-3909 | HIGH | 7.5 | 1.5% | Nov 11, 2021 | OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRP... |
| CVE-2021-3908 | HIGH | 7.5 | 0.7% | Nov 11, 2021 | OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, the... |
| CVE-2021-26558 | HIGH | 7.5 | 2.4% | Nov 11, 2021 | Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link reso... |
| CVE-2021-25980 | HIGH | 8.8 | 1.2% | Nov 11, 2021 | In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 an... |
| CVE-2021-43397 | HIGH | 8.8 | 3.7% | Nov 11, 2021 | LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin. |
| CVE-2021-40873 | HIGH | 7.5 | 1.3% | Nov 10, 2021 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40.... |
| CVE-2021-40872 | HIGH | 7.5 | 1.5% | Nov 10, 2021 | An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a den... |
| CVE-2021-40871 | HIGH | 7.5 | 1.3% | Nov 10, 2021 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial ... |
| CVE-2021-32023 | HIGH | 7.8 | 0.3% | Nov 10, 2021 | An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574... |
| CVE-2021-32021 | HIGH | 7.8 | 0.3% | Nov 10, 2021 | A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and e... |
| CVE-2021-22048 | HIGH | 8.8 | 10.0% | Nov 10, 2021 | The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authenti... |
| CVE-2021-3063 | HIGH | 7.5 | 0.9% | Nov 10, 2021 | An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gatew... |
| CVE-2021-3062 | HIGH | 8.8 | 0.7% | Nov 10, 2021 | An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access to GlobalProte... |
| CVE-2021-3061 | HIGH | 7.2 | 0.9% | Nov 10, 2021 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authentic... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now