2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38420 | HIGH | 7.8 | 0.2% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-privileged us... |
| CVE-2021-38416 | HIGH | 7.8 | 0.2% | Nov 3, 2021 | Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL ... |
| CVE-2021-35053 | HIGH | 7.5 | 2.5% | Nov 3, 2021 | Possible system denial of service in case of arbitrary changing Firefox browser parameters. An attacker could change spe... |
| CVE-2021-33800 | HIGH | 7.5 | 1.5% | Nov 3, 2021 | In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory traversal. |
| CVE-2021-26786 | HIGH | 8.8 | 1.5% | Nov 3, 2021 | An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbit... |
| CVE-2021-41585 | HIGH | 7.5 | 2.4% | Nov 3, 2021 | Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to m... |
| CVE-2021-38161 | HIGH | 8.1 | 1.9% | Nov 3, 2021 | Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle a... |
| CVE-2021-37149 | HIGH | 7.5 | 2.5% | Nov 3, 2021 | Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle request... |
| CVE-2021-37148 | HIGH | 7.5 | 2.5% | Nov 3, 2021 | Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle request... |
| CVE-2021-37147 | HIGH | 7.5 | 2.4% | Nov 3, 2021 | Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle request... |
| CVE-2021-40848 | HIGH | 7.8 | 1.0% | Nov 3, 2021 | In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet ... |
| CVE-2021-41312 | HIGH | 7.5 | 1.2% | Nov 3, 2021 | Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from... |
| CVE-2021-38501 | HIGH | 8.8 | 1.0% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evi... |
| CVE-2021-38500 | HIGH | 8.8 | 1.2% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evi... |
| CVE-2021-38499 | HIGH | 8.8 | 0.8% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corru... |
| CVE-2021-38498 | HIGH | 7.5 | 1.4% | Nov 3, 2021 | During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory ... |
| CVE-2021-38496 | HIGH | 8.8 | 1.6% | Nov 3, 2021 | During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corrup... |
| CVE-2021-38495 | HIGH | 8.8 | 1.1% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of mem... |
| CVE-2021-38494 | HIGH | 8.8 | 0.8% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corru... |
| CVE-2021-38493 | HIGH | 8.8 | 1.2% | Nov 3, 2021 | Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed ev... |
| CVE-2021-29993 | HIGH | 8.1 | 0.7% | Nov 3, 2021 | Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI sp... |
| CVE-2021-29991 | HIGH | 8.1 | 0.9% | Nov 3, 2021 | Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a ... |
| CVE-2021-20707 | HIGH | 7.5 | 1.0% | Nov 3, 2021 | Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUST... |
| CVE-2021-20706 | HIGH | 7.5 | 1.1% | Nov 3, 2021 | Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3... |
| CVE-2021-20705 | HIGH | 7.5 | 1.1% | Nov 3, 2021 | Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now