2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43084 | CRITICAL | 9.8 | 0.9% | Mar 24, 2022 | An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter. |
| CVE-2021-39491 | MEDIUM | 5.4 | 0.5% | Mar 24, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan ... |
| CVE-2021-43659 | MEDIUM | 5.4 | 0.5% | Mar 24, 2022 | In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, wh... |
| CVE-2021-43700 | CRITICAL | 9.8 | 1.1% | Mar 24, 2022 | An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=api&tag=8... |
| CVE-2021-31326 | CRITICAL | 9.8 | 2.2% | Mar 24, 2022 | D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parame... |
| CVE-2021-44226 | HIGH | 7.3 | 0.9% | Mar 23, 2022 | Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Servi... |
| CVE-2021-28278 | HIGH | 7.8 | 0.9% | Mar 23, 2022 | A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c... |
| CVE-2021-28277 | HIGH | 7.8 | 0.9% | Mar 23, 2022 | A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUn... |
| CVE-2021-28276 | HIGH | 7.5 | 1.1% | Mar 23, 2022 | A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir ... |
| CVE-2021-28275 | MEDIUM | 5.5 | 0.7% | Mar 23, 2022 | A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exi... |
| CVE-2021-4219 | MEDIUM | 5.5 | 1.0% | Mar 23, 2022 | A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of... |
| CVE-2021-4197 | HIGH | 7.8 | 0.5% | Mar 23, 2022 | An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found i... |
| CVE-2021-4180 | MEDIUM | 4.3 | 0.8% | Mar 23, 2022 | An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or ... |
| CVE-2021-4156 | HIGH | 7.1 | 1.8% | Mar 23, 2022 | An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a speci... |
| CVE-2021-4150 | MEDIUM | 5.5 | 0.3% | Mar 23, 2022 | A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker wi... |
| CVE-2021-4149 | MEDIUM | 5.5 | 0.4% | Mar 23, 2022 | A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock op... |
| CVE-2021-4148 | MEDIUM | 5.5 | 0.3% | Mar 23, 2022 | A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity ... |
| CVE-2021-3748 | HIGH | 7.5 | 0.5% | Mar 23, 2022 | A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address ... |
| CVE-2021-3618 | HIGH | 7.4 | 2.0% | Mar 23, 2022 | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocol... |
| CVE-2021-3589 | HIGH | 8 | 1.0% | Mar 23, 2022 | An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run... |
| CVE-2021-27476 | CRITICAL | 9.8 | 4.3% | Mar 23, 2022 | A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection... |
| CVE-2021-27475 | HIGH | 8.6 | 2.8% | Mar 23, 2022 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserializ... |
| CVE-2021-27474 | HIGH | 7.5 | 1.5% | Mar 23, 2022 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS ... |
| CVE-2021-27473 | HIGH | 8.2 | 0.8% | Mar 23, 2022 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccw... |
| CVE-2021-27472 | CRITICAL | 9.8 | 5.3% | Mar 23, 2022 | A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now