2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39750 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In PackageManager, there is a possible way to change the splash screen theme of other apps due to a missing permission c... |
| CVE-2021-39749 | HIGH | 7.8 | 0.2% | Mar 30, 2022 | In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission che... |
| CVE-2021-39748 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent... |
| CVE-2021-39747 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass... |
| CVE-2021-39746 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could l... |
| CVE-2021-39745 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due... |
| CVE-2021-39744 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due... |
| CVE-2021-39743 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission ... |
| CVE-2021-39742 | MEDIUM | 5.5 | 0.3% | Mar 30, 2022 | In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could l... |
| CVE-2021-39741 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2021-39740 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lea... |
| CVE-2021-39739 | LOW | 3.3 | 0.1% | Mar 30, 2022 | In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead ... |
| CVE-2021-23851 | HIGH | 7.2 | 1.5% | Mar 30, 2022 | A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer... |
| CVE-2021-23850 | HIGH | 7.2 | 1.5% | Mar 30, 2022 | A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffe... |
| CVE-2021-1033 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe... |
| CVE-2021-1000 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an uns... |
| CVE-2021-41594 | MEDIUM | 6.5 | 0.8% | Mar 30, 2022 | In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by inte... |
| CVE-2021-44082 | HIGH | 8.3 | 2.8% | Mar 29, 2022 | textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthentica... |
| CVE-2021-43118 | CRITICAL | 9.8 | 34.8% | Mar 29, 2022 | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek V... |
| CVE-2021-42911 | CRITICAL | 9.8 | 3.3% | Mar 29, 2022 | A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor ... |
| CVE-2021-43110 | CRITICAL | 9.8 | 1.5% | Mar 29, 2022 | An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in add_products. |
| CVE-2021-43109 | HIGH | 7.5 | 1.2% | Mar 29, 2022 | An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in pr... |
| CVE-2021-42970 | MEDIUM | 6.1 | 0.7% | Mar 29, 2022 | Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter. |
| CVE-2021-44081 | HIGH | 7.5 | 1.0% | Mar 29, 2022 | A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4. When the length of MSIN in Supi exceeds 24 character... |
| CVE-2021-43701 | MEDIUM | 6.5 | 3.3% | Mar 29, 2022 | CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/articl... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now