2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39800 | MEDIUM | 5.5 | 0.1% | Apr 12, 2022 | In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead t... |
| CVE-2021-39799 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. ... |
| CVE-2021-39798 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. Th... |
| CVE-2021-39797 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the co... |
| CVE-2021-39796 | HIGH | 7.3 | 0.2% | Apr 12, 2022 | In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmf... |
| CVE-2021-39795 | — | — | — | Apr 12, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2021-39794 | HIGH | 7.8 | 0.3% | Apr 12, 2022 | In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless deb... |
| CVE-2021-36914 | MEDIUM | 6.1 | 0.5% | Apr 12, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Man... |
| CVE-2021-0707 | HIGH | 7.8 | 0.2% | Apr 12, 2022 | In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local... |
| CVE-2021-0694 | HIGH | 7.8 | 0.1% | Apr 12, 2022 | In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regai... |
| CVE-2021-42255 | HIGH | 7.8 | 0.3% | Apr 12, 2022 | AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can ... |
| CVE-2021-31805 | CRITICAL | 9.8 | 85.1% | Apr 12, 2022 | The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attribu... |
| CVE-2021-32040 | HIGH | 7.5 | 1.9% | Apr 12, 2022 | It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and caus... |
| CVE-2021-42029 | HIGH | 7.8 | 0.2% | Apr 12, 2022 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (... |
| CVE-2021-40368 | HIGH | 7.5 | 0.9% | Apr 12, 2022 | A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (... |
| CVE-2021-4047 | HIGH | 7.5 | 0.9% | Apr 11, 2022 | The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was... |
| CVE-2021-46742 | CRITICAL | 9.1 | 0.7% | Apr 11, 2022 | The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful e... |
| CVE-2021-46740 | HIGH | 7.5 | 0.7% | Apr 11, 2022 | The device authentication service module has a defect vulnerability introduced in the design process.Successful exploita... |
| CVE-2021-43177 | MEDIUM | 5.3 | 0.8% | Apr 11, 2022 | As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to re... |
| CVE-2021-40065 | HIGH | 7.5 | 0.7% | Apr 11, 2022 | The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affec... |
| CVE-2021-38125 | CRITICAL | 9.8 | 1.8% | Apr 11, 2022 | Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.0... |
| CVE-2021-36910 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20. |
| CVE-2021-36896 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress p... |
| CVE-2021-36893 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Responsive Tabs (WordPress... |
| CVE-2021-36848 | MEDIUM | 4.8 | 0.6% | Apr 11, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versio... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now