2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43142 | CRITICAL | 9.8 | 1.4% | Mar 30, 2022 | An XML External Entity (XXE) vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput. |
| CVE-2021-38362 | MEDIUM | 6.5 | 0.9% | Mar 30, 2022 | In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint tha... |
| CVE-2021-33581 | HIGH | 7.2 | 1.2% | Mar 30, 2022 | MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP servic... |
| CVE-2021-33208 | HIGH | 7.2 | 1.1% | Mar 30, 2022 | The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a ... |
| CVE-2021-40645 | MEDIUM | 6.5 | 1.1% | Mar 30, 2022 | An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataLi... |
| CVE-2021-40644 | MEDIUM | 6.5 | 1.1% | Mar 30, 2022 | An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml. |
| CVE-2021-45031 | HIGH | 7.7 | 0.8% | Mar 30, 2022 | A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate hi... |
| CVE-2021-44312 | HIGH | 8.8 | 0.4% | Mar 30, 2022 | An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a C... |
| CVE-2021-44310 | MEDIUM | 4.8 | 0.6% | Mar 30, 2022 | An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could... |
| CVE-2021-3456 | HIGH | 7.1 | 0.2% | Mar 30, 2022 | An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients... |
| CVE-2021-39791 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions,... |
| CVE-2021-39790 | HIGH | 7.8 | 0.3% | Mar 30, 2022 | In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This could... |
| CVE-2021-39789 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In Telecom, there is a possible leak of TTY mode change due to a missing permission check. This could lead to local esca... |
| CVE-2021-39788 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the dev... |
| CVE-2021-39787 | HIGH | 7.8 | 0.4% | Mar 30, 2022 | In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation... |
| CVE-2021-39786 | MEDIUM | 6.7 | 0.1% | Mar 30, 2022 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2021-39784 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission chec... |
| CVE-2021-39783 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This could lead to local es... |
| CVE-2021-39782 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This... |
| CVE-2021-39781 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In SmsController, there is a possible information disclosure due to a permissions bypass. This could lead to local escal... |
| CVE-2021-39780 | HIGH | 7.8 | 0.3% | Mar 30, 2022 | In Traceur, there is a possible bypass of developer settings requirements for capturing system traces due to a missing p... |
| CVE-2021-39779 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local informatio... |
| CVE-2021-39778 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to imprope... |
| CVE-2021-39777 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a miss... |
| CVE-2021-39776 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In NFC, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now