2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4206 | HIGH | 8.2 | 0.8% | Apr 29, 2022 | A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lea... |
| CVE-2021-3982 | MEDIUM | 5.5 | 0.3% | Apr 29, 2022 | Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with... |
| CVE-2021-36207 | HIGH | 8.8 | 0.9% | Apr 29, 2022 | Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow ... |
| CVE-2021-43938 | CRITICAL | 9.8 | 1.0% | Apr 29, 2022 | Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server witho... |
| CVE-2021-43937 | HIGH | 8.8 | 0.3% | Apr 29, 2022 | Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, c... |
| CVE-2021-39082 | HIGH | 7.5 | 0.6% | Apr 29, 2022 | IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to de... |
| CVE-2021-41948 | MEDIUM | 5.4 | 0.5% | Apr 29, 2022 | A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List ... |
| CVE-2021-44596 | CRITICAL | 9.8 | 22.7% | Apr 29, 2022 | Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an ... |
| CVE-2021-44595 | HIGH | 8.8 | 21.0% | Apr 29, 2022 | Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send m... |
| CVE-2021-41942 | HIGH | 7.5 | 1.1% | Apr 29, 2022 | The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sens... |
| CVE-2021-38952 | MEDIUM | 5.4 | 0.4% | Apr 28, 2022 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2021-43939 | HIGH | 8.8 | 0.6% | Apr 28, 2022 | Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by i... |
| CVE-2021-43934 | CRITICAL | 9.8 | 1.1% | Apr 28, 2022 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling... |
| CVE-2021-43932 | MEDIUM | 6.1 | 0.6% | Apr 28, 2022 | Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed up... |
| CVE-2021-43930 | MEDIUM | 4.9 | 1.0% | Apr 28, 2022 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabli... |
| CVE-2021-41945 | CRITICAL | 9.1 | 2.2% | Apr 28, 2022 | Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions usi... |
| CVE-2021-41921 | CRITICAL | 9.8 | 1.6% | Apr 28, 2022 | novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks a... |
| CVE-2021-33436 | HIGH | 7.3 | 0.3% | Apr 28, 2022 | NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe D... |
| CVE-2021-3523 | HIGH | 7.5 | 0.8% | Apr 27, 2022 | A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. T... |
| CVE-2021-25266 | LOW | 3.9 | 0.2% | Apr 27, 2022 | An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from... |
| CVE-2021-38939 | MEDIUM | 5.3 | 0.8% | Apr 27, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user wi... |
| CVE-2021-38919 | HIGH | 7.5 | 1.0% | Apr 27, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-For... |
| CVE-2021-38878 | HIGH | 7.5 | 1.1% | Apr 27, 2022 | IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity au... |
| CVE-2021-38874 | MEDIUM | 4.3 | 0.7% | Apr 27, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some sit... |
| CVE-2021-38869 | CRITICAL | 9.8 | 0.8% | Apr 27, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle t... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now