2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23287 | MEDIUM | 5.4 | 0.4% | Apr 1, 2022 | The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issu... |
| CVE-2021-23247 | CRITICAL | 9.8 | 1.7% | Apr 1, 2022 | A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote att... |
| CVE-2021-22277 | HIGH | 7.5 | 0.9% | Apr 1, 2022 | Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Produc... |
| CVE-2021-20295 | MEDIUM | 6.5 | 0.3% | Apr 1, 2022 | It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-... |
| CVE-2021-20238 | LOW | 3.7 | 0.7% | Apr 1, 2022 | It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accesse... |
| CVE-2021-44135 | CRITICAL | 9.8 | 1.5% | Apr 1, 2022 | pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing. |
| CVE-2021-46443 | — | — | — | Apr 1, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-35117 | CRITICAL | 9.1 | 0.8% | Apr 1, 2022 | An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Sna... |
| CVE-2021-35115 | HIGH | 7.8 | 0.2% | Apr 1, 2022 | Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon... |
| CVE-2021-35110 | HIGH | 8.8 | 0.2% | Apr 1, 2022 | Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivi... |
| CVE-2021-35106 | HIGH | 7.8 | 0.2% | Apr 1, 2022 | Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Sn... |
| CVE-2021-35105 | HIGH | 7.8 | 0.2% | Apr 1, 2022 | Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon ... |
| CVE-2021-35103 | HIGH | 7.8 | 0.2% | Apr 1, 2022 | Possible out of bound write due to improper validation of number of timer values received from firmware while syncing ti... |
| CVE-2021-35089 | HIGH | 7.8 | 0.2% | Apr 1, 2022 | Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto |
| CVE-2021-35088 | CRITICAL | 9.1 | 0.8% | Apr 1, 2022 | Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdrago... |
| CVE-2021-30333 | HIGH | 7.8 | 0.1% | Apr 1, 2022 | Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Co... |
| CVE-2021-30332 | HIGH | 7.5 | 0.5% | Apr 1, 2022 | Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Co... |
| CVE-2021-30331 | MEDIUM | 5.5 | 0.1% | Apr 1, 2022 | Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto... |
| CVE-2021-30329 | HIGH | 7.5 | 0.6% | Apr 1, 2022 | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Co... |
| CVE-2021-30328 | HIGH | 7.5 | 0.6% | Apr 1, 2022 | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon... |
| CVE-2021-1950 | HIGH | 7.8 | 0.2% | Apr 1, 2022 | Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto... |
| CVE-2021-1942 | HIGH | 8.8 | 0.1% | Apr 1, 2022 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon ... |
| CVE-2021-46439 | — | — | — | Mar 31, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-43722 | CRITICAL | 9.8 | 3.1% | Mar 31, 2022 | D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to fo... |
| CVE-2021-43707 | MEDIUM | 6.1 | 0.6% | Mar 31, 2022 | Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now