2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43270 | HIGH | 7.5 | 0.4% | Nov 2, 2021 | Datalust Seq.App.EmailPlus (aka seq-app-htmlemail) 3.1.0-dev-00148, 3.1.0-dev-00170, and 3.1.0-dev-00176 can use clearte... |
| CVE-2021-43266 | HIGH | 7.3 | 1.3% | Nov 2, 2021 | In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code executi... |
| CVE-2021-42697 | HIGH | 7.5 | 36.1% | Nov 2, 2021 | Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, whic... |
| CVE-2021-37993 | HIGH | 8.8 | 0.8% | Nov 2, 2021 | Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially expl... |
| CVE-2021-37992 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit h... |
| CVE-2021-37991 | HIGH | 7.5 | 0.8% | Nov 2, 2021 | Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a... |
| CVE-2021-37988 | HIGH | 8.8 | 0.8% | Nov 2, 2021 | Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to enga... |
| CVE-2021-37987 | HIGH | 8.8 | 0.8% | Nov 2, 2021 | Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit h... |
| CVE-2021-37986 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Too... |
| CVE-2021-37985 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow ... |
| CVE-2021-37984 | HIGH | 8.8 | 1.0% | Nov 2, 2021 | Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit h... |
| CVE-2021-37983 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-37982 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-37980 | HIGH | 7.4 | 1.4% | Nov 2, 2021 | Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially ... |
| CVE-2021-37979 | HIGH | 8.8 | 1.7% | Nov 2, 2021 | heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to ... |
| CVE-2021-37978 | HIGH | 8.8 | 1.0% | Nov 2, 2021 | Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit he... |
| CVE-2021-37977 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exp... |
| CVE-2021-41022 | HIGH | 7.8 | 0.2% | Nov 2, 2021 | A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute p... |
| CVE-2021-36187 | HIGH | 7.5 | 1.4% | Nov 2, 2021 | A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows... |
| CVE-2021-36185 | HIGH | 8.8 | 1.9% | Nov 2, 2021 | A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM versio... |
| CVE-2021-36183 | HIGH | 7.8 | 0.3% | Nov 2, 2021 | An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and belo... |
| CVE-2021-36174 | HIGH | 7.5 | 0.8% | Nov 2, 2021 | A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6... |
| CVE-2021-41238 | HIGH | 7.5 | 0.9% | Nov 2, 2021 | Hangfire is an open source system to perform background job processing in a .NET or .NET Core applications. No Windows S... |
| CVE-2021-36172 | HIGH | 8.1 | 0.8% | Nov 2, 2021 | An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal bef... |
| CVE-2021-29888 | HIGH | 8.8 | 0.5% | Nov 2, 2021 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now