2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33024 | HIGH | 7.5 | 0.9% | Apr 1, 2022 | Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure met... |
| CVE-2021-33022 | HIGH | 7.5 | 0.6% | Apr 1, 2022 | Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communicati... |
| CVE-2021-33020 | HIGH | 7.5 | 0.6% | Apr 1, 2022 | Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which dimini... |
| CVE-2021-33018 | HIGH | 7.5 | 0.5% | Apr 1, 2022 | The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary r... |
| CVE-2021-32976 | CRITICAL | 9.8 | 2.6% | Apr 1, 2022 | Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may a... |
| CVE-2021-32974 | CRITICAL | 9.8 | 2.6% | Apr 1, 2022 | Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier m... |
| CVE-2021-32970 | HIGH | 7.5 | 1.6% | Apr 1, 2022 | Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 ... |
| CVE-2021-32968 | HIGH | 7.5 | 1.6% | Apr 1, 2022 | Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may al... |
| CVE-2021-32961 | HIGH | 7.5 | 1.2% | Apr 1, 2022 | A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting ... |
| CVE-2021-32960 | HIGH | 8.8 | 2.3% | Apr 1, 2022 | Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed con... |
| CVE-2021-32957 | HIGH | 7.5 | 0.9% | Apr 1, 2022 | A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and... |
| CVE-2021-32953 | CRITICAL | 9.8 | 1.2% | Apr 1, 2022 | An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’... |
| CVE-2021-32949 | HIGH | 7.5 | 1.1% | Apr 1, 2022 | An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path ... |
| CVE-2021-32945 | HIGH | 7.5 | 0.4% | Apr 1, 2022 | An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06. |
| CVE-2021-32937 | HIGH | 7.5 | 1.0% | Apr 1, 2022 | An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in ... |
| CVE-2021-32933 | CRITICAL | 9.8 | 1.2% | Apr 1, 2022 | An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command... |
| CVE-2021-32503 | MEDIUM | 4.9 | 0.8% | Apr 1, 2022 | Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users... |
| CVE-2021-28504 | HIGH | 7.5 | 0.7% | Apr 1, 2022 | On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which m... |
| CVE-2021-27501 | CRITICAL | 9.8 | 0.9% | Apr 1, 2022 | Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to res... |
| CVE-2021-27497 | CRITICAL | 9.8 | 0.8% | Apr 1, 2022 | Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides suffi... |
| CVE-2021-27493 | MEDIUM | 6.5 | 0.7% | Apr 1, 2022 | Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well... |
| CVE-2021-27223 | MEDIUM | 5.5 | 0.2% | Apr 1, 2022 | A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and ... |
| CVE-2021-26624 | HIGH | 8.8 | 2.3% | Apr 1, 2022 | An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due ... |
| CVE-2021-26623 | CRITICAL | 9.8 | 1.1% | Apr 1, 2022 | A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter leng... |
| CVE-2021-23288 | MEDIUM | 4.8 | 0.3% | Apr 1, 2022 | The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacke... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now