2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39114 | HIGH | 8.8 | 1.7% | Apr 5, 2022 | Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account on a Confluence Data C... |
| CVE-2021-33207 | CRITICAL | 9.8 | 1.6% | Apr 5, 2022 | The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570... |
| CVE-2021-45893 | HIGH | 7.5 | 1.6% | Apr 5, 2022 | An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes... |
| CVE-2021-45892 | MEDIUM | 5.9 | 0.8% | Apr 5, 2022 | An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format. |
| CVE-2021-45891 | HIGH | 8.8 | 1.4% | Apr 5, 2022 | An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the ap... |
| CVE-2021-44109 | HIGH | 7.5 | 1.6% | Apr 5, 2022 | A buffer overflow in lib/sbi/message.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a c... |
| CVE-2021-44108 | HIGH | 7.5 | 1.5% | Apr 5, 2022 | A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of S... |
| CVE-2021-43008 | HIGH | 7.5 | 13.6% | Apr 5, 2022 | Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbit... |
| CVE-2021-42324 | HIGH | 7.4 | 0.6% | Apr 5, 2022 | An issue was discovered on DCN (Digital China Networks) S4600-10P-SI devices before R0241.0470. Due to improper paramete... |
| CVE-2021-45894 | MEDIUM | 5.9 | 0.8% | Apr 5, 2022 | An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of Sensitive Information. |
| CVE-2021-36851 | MEDIUM | 5.4 | 0.5% | Apr 4, 2022 | Authenticated (editor or higher user role) Cross-Site Scripting (XSS) vulnerability in Web-Settler Testimonial Slider – ... |
| CVE-2021-36826 | MEDIUM | 5.4 | 0.6% | Apr 4, 2022 | Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS) vulnerabi... |
| CVE-2021-33010 | HIGH | 7.5 | 1.0% | Apr 4, 2022 | An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught,... |
| CVE-2021-33008 | CRITICAL | 9.8 | 1.1% | Apr 4, 2022 | AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requi... |
| CVE-2021-32994 | HIGH | 7.5 | 1.6% | Apr 4, 2022 | Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly v... |
| CVE-2021-32986 | CRITICAL | 9.8 | 1.1% | Apr 4, 2022 | After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user... |
| CVE-2021-32985 | HIGH | 7.2 | 0.5% | Apr 4, 2022 | AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communicatio... |
| CVE-2021-32984 | CRITICAL | 9.8 | 1.1% | Apr 4, 2022 | All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the... |
| CVE-2021-32982 | HIGH | 7.5 | 0.6% | Apr 4, 2022 | Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during ... |
| CVE-2021-32981 | HIGH | 7.2 | 1.2% | Apr 4, 2022 | AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to ... |
| CVE-2021-32980 | CRITICAL | 9.8 | 1.1% | Apr 4, 2022 | Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional sof... |
| CVE-2021-32978 | HIGH | 7.5 | 1.0% | Apr 4, 2022 | The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previ... |
| CVE-2021-32977 | HIGH | 7.2 | 0.6% | Apr 4, 2022 | AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic sign... |
| CVE-2021-43464 | HIGH | 8.8 | 1.4% | Apr 4, 2022 | A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when th... |
| CVE-2021-43463 | HIGH | 7.8 | 0.4% | Apr 4, 2022 | An Unquoted Service Path vulnerability exists in Ext2Fsd v0.68 via a specially crafted file in the Ext2Srv Service execu... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now