2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4157 | HIGH | 8 | 1.6% | Mar 25, 2022 | An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users... |
| CVE-2021-4147 | MEDIUM | 6.5 | 0.2% | Mar 25, 2022 | A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on t... |
| CVE-2021-44768 | MEDIUM | 5.5 | 0.7% | Mar 25, 2022 | Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specifi... |
| CVE-2021-44477 | HIGH | 7.5 | 1.1% | Mar 25, 2022 | GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD paramete... |
| CVE-2021-44462 | HIGH | 7.1 | 0.7% | Mar 25, 2022 | This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionR... |
| CVE-2021-3941 | MEDIUM | 6.5 | 0.3% | Mar 25, 2022 | In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x -... |
| CVE-2021-3933 | MEDIUM | 5.5 | 0.8% | Mar 25, 2022 | An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could caus... |
| CVE-2021-3814 | HIGH | 7.5 | 1.1% | Mar 25, 2022 | It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session aut... |
| CVE-2021-3582 | MEDIUM | 6.5 | 0.4% | Mar 25, 2022 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRD... |
| CVE-2021-3567 | HIGH | 7.5 | 1.1% | Mar 25, 2022 | A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-... |
| CVE-2021-3422 | HIGH | 7.5 | 0.6% | Mar 25, 2022 | The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk En... |
| CVE-2021-35254 | HIGH | 8.8 | 1.0% | Mar 25, 2022 | SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds ha... |
| CVE-2021-26622 | CRITICAL | 10 | 2.9% | Mar 25, 2022 | An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was dis... |
| CVE-2021-26621 | CRITICAL | 9.8 | 1.6% | Mar 25, 2022 | An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this... |
| CVE-2021-26620 | HIGH | 7.5 | 1.3% | Mar 25, 2022 | An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attack... |
| CVE-2021-22100 | MEDIUM | 5.3 | 0.9% | Mar 25, 2022 | In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker... |
| CVE-2021-20323 | MEDIUM | 6.1 | 37.2% | Mar 25, 2022 | A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak. |
| CVE-2021-20290 | MEDIUM | 6.1 | 0.2% | Mar 25, 2022 | An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman cli... |
| CVE-2021-43636 | CRITICAL | 9.8 | 1.0% | Mar 25, 2022 | Two Buffer Overflow vulnerabilities exists in T10 V2_Firmware V4.1.8cu.5207_B20210320 in the http_request_parse function... |
| CVE-2021-43091 | HIGH | 7.5 | 1.4% | Mar 25, 2022 | An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form. |
| CVE-2021-46426 | MEDIUM | 6.1 | 0.9% | Mar 25, 2022 | phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functiona... |
| CVE-2021-43090 | CRITICAL | 9.8 | 1.9% | Mar 25, 2022 | An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function. |
| CVE-2021-44751 | MEDIUM | 5.3 | 0.6% | Mar 25, 2022 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in... |
| CVE-2021-43666 | HIGH | 7.5 | 2.1% | Mar 24, 2022 | A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an... |
| CVE-2021-43085 | — | — | — | Mar 24, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now