2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3928 | HIGH | 7.8 | 0.6% | Nov 5, 2021 | vim is vulnerable to Use of Uninitialized Variable |
| CVE-2021-3927 | HIGH | 7.8 | 1.7% | Nov 5, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-3924 | HIGH | 7.5 | 4.2% | Nov 5, 2021 | grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2021-42671 | HIGH | 7.5 | 19.7% | Nov 5, 2021 | An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitorin... |
| CVE-2021-42666 | HIGH | 8.8 | 4.4% | Nov 5, 2021 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_quest... |
| CVE-2021-25509 | HIGH | 7.1 | 0.2% | Nov 5, 2021 | A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite ab... |
| CVE-2021-25505 | HIGH | 7.8 | 0.6% | Nov 5, 2021 | Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is un... |
| CVE-2021-42057 | HIGH | 7.8 | 1.2% | Nov 4, 2021 | Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. The evalInContext function in executes user input, which... |
| CVE-2021-43396 | HIGH | 7.5 | 3.3% | Nov 4, 2021 | In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spuriou... |
| CVE-2021-43281 | HIGH | 7.2 | 1.3% | Nov 4, 2021 | MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's S... |
| CVE-2021-41247 | HIGH | 7.5 | 0.8% | Nov 4, 2021 | JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple Jupyt... |
| CVE-2021-21698 | HIGH | 7.5 | 2.1% | Nov 4, 2021 | Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file ... |
| CVE-2021-21695 | HIGH | 8.8 | 2.1% | Nov 4, 2021 | FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Je... |
| CVE-2021-21688 | HIGH | 7.5 | 1.3% | Nov 4, 2021 | The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earli... |
| CVE-2021-21686 | HIGH | 8.1 | 1.9% | Nov 4, 2021 | File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do... |
| CVE-2021-40124 | HIGH | 7.8 | 0.2% | Nov 4, 2021 | A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could ... |
| CVE-2021-40120 | HIGH | 7.2 | 1.9% | Nov 4, 2021 | A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an a... |
| CVE-2021-40112 | HIGH | 7.5 | 1.4% | Nov 4, 2021 | Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Serie... |
| CVE-2021-34741 | HIGH | 7.5 | 1.2% | Nov 4, 2021 | A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could... |
| CVE-2021-34739 | HIGH | 8.1 | 1.6% | Nov 4, 2021 | A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an un... |
| CVE-2021-42624 | HIGH | 7.8 | 0.3% | Nov 4, 2021 | A local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c through the tmp variable, w... |
| CVE-2021-34597 | HIGH | 7.8 | 0.6% | Nov 4, 2021 | Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an... |
| CVE-2021-43339 | HIGH | 8.8 | 9.6% | Nov 3, 2021 | In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file... |
| CVE-2021-38424 | HIGH | 7.8 | 0.5% | Nov 3, 2021 | The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formula... |
| CVE-2021-38422 | HIGH | 7.8 | 0.2% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attac... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now