2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-44488 | CRITICAL | 9.1 | 1.0% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and i... |
| CVE-2021-44487 | HIGH | 7.5 | 1.1% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/io... |
| CVE-2021-44486 | CRITICAL | 9.8 | 1.8% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value o... |
| CVE-2021-44485 | HIGH | 7.5 | 1.1% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c ... |
| CVE-2021-44484 | HIGH | 7.5 | 1.1% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/em... |
| CVE-2021-44483 | HIGH | 7.5 | 1.1% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/... |
| CVE-2021-44482 | HIGH | 7.5 | 1.0% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_un... |
| CVE-2021-44481 | HIGH | 7.5 | 1.0% | Apr 15, 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in chec... |
| CVE-2021-42230 | CRITICAL | 9.8 | 5.9% | Apr 15, 2022 | Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter. |
| CVE-2021-36828 | MEDIUM | 4.8 | 0.5% | Apr 15, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions. |
| CVE-2021-36205 | CRITICAL | 9.8 | 1.0% | Apr 15, 2022 | Under certain circumstances the session token is not cleared on logout. |
| CVE-2021-40386 | CRITICAL | 9.8 | 1.8% | Apr 15, 2022 | Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code. |
| CVE-2021-28505 | HIGH | 7.5 | 0.8% | Apr 14, 2022 | On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of ... |
| CVE-2021-44394 | HIGH | 7.5 | 1.7% | Apr 14, 2022 | Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-4... |
| CVE-2021-44375 | HIGH | 7.5 | 1.7% | Apr 14, 2022 | Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-4... |
| CVE-2021-44366 | HIGH | 7.5 | 1.7% | Apr 14, 2022 | Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-4... |
| CVE-2021-44357 | HIGH | 7.5 | 1.7% | Apr 14, 2022 | Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-4... |
| CVE-2021-44356 | HIGH | 7.5 | 1.7% | Apr 14, 2022 | Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-4... |
| CVE-2021-44355 | HIGH | 7.5 | 1.7% | Apr 14, 2022 | Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-4... |
| CVE-2021-44354 | HIGH | 7.5 | 1.7% | Apr 14, 2022 | Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-4... |
| CVE-2021-43257 | HIGH | 7.8 | 0.9% | Apr 14, 2022 | Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to e... |
| CVE-2021-40426 | HIGH | 8.8 | 2.1% | Apr 14, 2022 | A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14... |
| CVE-2021-40425 | MEDIUM | 6.5 | 0.3% | Apr 14, 2022 | An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A sp... |
| CVE-2021-40424 | MEDIUM | 6.5 | 0.3% | Apr 14, 2022 | An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A sp... |
| CVE-2021-40422 | CRITICAL | 10 | 5.6% | Apr 14, 2022 | An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway S... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now