2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43286 | HIGH | 8.8 | 2.6% | Apr 14, 2022 | An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker with privileges to create a new pipeline on a Go... |
| CVE-2021-43287 | HIGH | 7.5 | 23.7% | Apr 14, 2022 | An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default,... |
| CVE-2021-43154 | MEDIUM | 6.1 | 0.5% | Apr 13, 2022 | Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action i... |
| CVE-2021-41119 | HIGH | 7.5 | 1.5% | Apr 13, 2022 | Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial o... |
| CVE-2021-42136 | CRITICAL | 9 | 4.5% | Apr 13, 2022 | A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows... |
| CVE-2021-22797 | HIGH | 7.8 | 26.1% | Apr 13, 2022 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could ... |
| CVE-2021-22795 | CRITICAL | 9.8 | 3.1% | Apr 13, 2022 | A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists... |
| CVE-2021-22794 | CRITICAL | 9.8 | 2.1% | Apr 13, 2022 | A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could ... |
| CVE-2021-46167 | HIGH | 7.8 | 0.4% | Apr 13, 2022 | An access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data an... |
| CVE-2021-43741 | CRITICAL | 9.8 | 4.5% | Apr 13, 2022 | CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicio... |
| CVE-2021-43742 | MEDIUM | 5.4 | 0.5% | Apr 13, 2022 | CMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature. |
| CVE-2021-44520 | HIGH | 8.8 | 5.6% | Apr 13, 2022 | In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remo... |
| CVE-2021-28544 | MEDIUM | 4.3 | 2.7% | Apr 12, 2022 | Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should b... |
| CVE-2021-41005 | MEDIUM | 6.5 | 0.8% | Apr 12, 2022 | A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. |
| CVE-2021-41004 | HIGH | 7.5 | 0.9% | Apr 12, 2022 | A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. |
| CVE-2021-39814 | MEDIUM | 6.7 | 0.1% | Apr 12, 2022 | In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could l... |
| CVE-2021-39812 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of pr... |
| CVE-2021-39809 | HIGH | 7.5 | 0.7% | Apr 12, 2022 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. T... |
| CVE-2021-39808 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground ... |
| CVE-2021-39807 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a... |
| CVE-2021-39805 | MEDIUM | 6.5 | 0.3% | Apr 12, 2022 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This coul... |
| CVE-2021-39804 | MEDIUM | 6.5 | 0.4% | Apr 12, 2022 | In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persi... |
| CVE-2021-39803 | MEDIUM | 6.5 | 0.6% | Apr 12, 2022 | In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remot... |
| CVE-2021-39802 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. ... |
| CVE-2021-39801 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escala... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now