2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41307 | HIGH | 7.5 | 1.6% | Oct 26, 2021 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of p... |
| CVE-2021-41306 | HIGH | 7.5 | 1.6% | Oct 26, 2021 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and ... |
| CVE-2021-41305 | HIGH | 7.5 | 1.2% | Oct 26, 2021 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private... |
| CVE-2021-41177 | HIGH | 8.1 | 1.5% | Oct 25, 2021 | Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, Nextcloud... |
| CVE-2021-41145 | HIGH | 7.5 | 1.6% | Oct 25, 2021 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to ... |
| CVE-2021-41105 | HIGH | 7.5 | 2.4% | Oct 25, 2021 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to ... |
| CVE-2021-39225 | HIGH | 8.1 | 1.3% | Oct 25, 2021 | Nextcloud is an open-source, self-hosted productivity platform. A missing permission check in Nextcloud Deck before 1.2.... |
| CVE-2021-38260 | HIGH | 7.8 | 0.3% | Oct 25, 2021 | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDe... |
| CVE-2021-38258 | HIGH | 7.8 | 0.3% | Oct 25, 2021 | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback(). |
| CVE-2021-34864 | HIGH | 8.8 | 0.2% | Oct 25, 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (... |
| CVE-2021-34863 | HIGH | 8.8 | 1.4% | Oct 25, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2... |
| CVE-2021-34862 | HIGH | 8.8 | 0.8% | Oct 25, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2... |
| CVE-2021-34861 | HIGH | 8.8 | 0.8% | Oct 25, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2... |
| CVE-2021-34859 | HIGH | 8.8 | 9.1% | Oct 25, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. ... |
| CVE-2021-34857 | HIGH | 8.8 | 0.3% | Oct 25, 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (... |
| CVE-2021-34856 | HIGH | 8.8 | 0.3% | Oct 25, 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (... |
| CVE-2021-34854 | HIGH | 7.8 | 0.2% | Oct 25, 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (... |
| CVE-2021-37624 | HIGH | 7.5 | 3.5% | Oct 25, 2021 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to ... |
| CVE-2021-24774 | HIGH | 7.2 | 1.3% | Oct 25, 2021 | The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameter... |
| CVE-2021-24769 | HIGH | 7.2 | 1.3% | Oct 25, 2021 | The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before us... |
| CVE-2021-24662 | HIGH | 7.2 | 1.3% | Oct 25, 2021 | The Game Server Status WordPress plugin through 1.0 does not validate or escape the server_id parameter before using it ... |
| CVE-2021-24487 | HIGH | 8.8 | 0.6% | Oct 25, 2021 | The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its 'Default Text to Dis... |
| CVE-2021-0936 | HIGH | 7.8 | 0.1% | Oct 25, 2021 | In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local es... |
| CVE-2021-0631 | HIGH | 7.5 | 0.9% | Oct 25, 2021 | In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of serv... |
| CVE-2021-0630 | HIGH | 7.5 | 0.9% | Oct 25, 2021 | In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of serv... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now